cai.cegedim.fr

- CEGEDIM SA -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 07:d0:30:bc:46:e9:1f:28:b3:27:2d:7c:92:fc:aa:9e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CEGEDIM SA

Organization: CEGEDIM SA
Organization unit: IT
State / Province: Ile-de-France
Locality: BOULOGNE BILLANCOURT
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:d0:30:bc:46:e9:1f:28:b3:27:2d:7c:92:fc:aa:9e
Serial Number (int): 10385582189570960766541241898535529118
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:64:30:a0:35:19:48:70:9c:11:12:26:1e:f4:c9:97:55:e3:f0:64
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 81:5d:83:5f:c0:1d:12:5a:30:ad:26:21:ab:31:1d:4b:c0:c7:c8:fb
Fingerprint (sha256): e7:24:03:a1:61:27:72:5b:5b:b3:02:a1:aa:9c:6b:07:5f:d9:89:c1:32:33:6f:31:42:cb:f0:50:a2:87:f0:a5

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate cai.cegedim.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cai.cegedim.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cai.cegedim.fr

Other certificates including the domain name cegedim.fr

(limited to 100 certificates)
cai.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
cai.cegedim.fr
trophees.cegedim.fr
teletrans.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
ws-edi.cegedim.fr
tst-teledistrib.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
teledistrib.cegedim.fr
teletrans.cegedim.fr
cai.cegedim.fr
teledistrib.cegedim.fr
*.cegedim.fr
ws-edi.cegedim.fr
tst-teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
www.pco.cegedim.fr
teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
www.pco.cegedim.fr
teledistrib.cegedim.fr
pmx01i.cegedim.fr
teledistrib.cegedim.fr
*.cegedim.fr
tst-teledistrib.cegedim.fr
cai.cegedim.fr
teletrans.cegedim.fr
*.cegedim.fr
serviceclientteams.cegedim.fr
teledistrib.cegedim.fr
cai.cegedim.fr
tst-teledistrib.cegedim.fr
oftp2.cegedim.fr
*.cegedim.fr
teletrans.cegedim.fr
cai.cegedim.fr
tst-teledistrib.cegedim.fr
*.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
services-teleprocedures.cegedim.fr
teledistrib.cegedim.fr

Certificate

The complete raw certificate details for cai.cegedim.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FrFkn4R4ep/MXl3Ze//
dNXqh+PtX/Ra9yQ+vKJeTczTVpcnhUfdoU/ixe9lf0tRpNpZl/DILzTUlPlG+HeZ
9z7fiLIO2k/3YF9TgXyfh8l4mk9Z9lSlrOlfEn+BHC0OXgeeUXYuIld7QH7jhzYz
ia+QV0RQTSHPO9ii0damIOlxbxPrgQkQJ1RWuVax3nAbDb8i0DlxFuwLNrlQX8vy
hvkw9FT9BLmh1x18uW3HnhBjkABCdEYGDo8limAJzNR9zFP4RkfiY+cQtTAlYBUc
NAUW3et76JzrlN+oHMH8Cvnpd3grhJ5gzG+i9SPKXZV7GQoMTMdhrrDIh6+rYuNL
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10385582189570960766541241898535529118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOULOGNE BILLANCOURT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CEGEDIM SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cai.cegedim.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27817188318891247454292452559870674443186407744760405810937125545113602028694560376432175872667245114708345623020544585424473869938902571064846511524155305200624013386981015121782330149415811923037243843965653623284257909039294184173624534053942210057575968341716144021584540190416997790163635822072276057107291644349117217402371822459434961929258983192830899595820008538993551477044883238171174328739233957166938964809590426255366288346486228579165812420298355606054119997133525638319181221111276716840620395307555645803482237877415978886217805520411167518258625483003398874473514130734664929954623206738357718829947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff6430a0351948709c1112261ef4c99755e3f064
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cai.cegedim.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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