bases.alienor.org

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number 1c:c5:0f:fe:cf:42:89:a0:43:9e:ab:dc:87:68:7b:7b was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bases.alienor.org,OU=Domain Control Validated+OU=Gandi Standard SSL

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:c5:0f:fe:cf:42:89:a0:43:9e:ab:dc:87:68:7b:7b
Serial Number (int): 38241590787350174939997933930635885435
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 66:ed:4a:ae:94:d8:ca:48:66:f3:00:48:d0:ab:d5:ff:03:be:84:51
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): 1e:16:2e:0f:a0:4a:1b:57:9d:0c:f2:2d:d6:34:d6:93:c7:ea:05:90
Fingerprint (sha256): ec:3b:24:29:1e:91:a5:a5:ca:1e:ca:2d:d2:73:e5:c7:be:47:d2:b5:fd:ad:53:6d:3d:de:81:24:75:29:10:4f

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate bases.alienor.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bases.alienor.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bases.alienor.org
www.bases.alienor.org

Other certificates including the domain name alienor.org

(limited to 100 certificates)
alienor.org
bases.alienor.org
dev.alienor.org
amis-des-musees.alienor.org
bases-alienor.wedia-group.com
musee3d.alienor.org
musee3d.alienor.org
dev.alienor.org
musee3d.alienor.org
bases.alienor.org
la-revue.alienor.org
preprod.alienor.org
amis-des-musees.alienor.org
alienor.org
bases.alienor.org
bases-alienor.wedia-group.com
musee3d.alienor.org
la-revue.alienor.org
alienor.org
bases.alienor.org
dev.alienor.org
preprod.alienor.org
musee3d.alienor.org
amis-des-musees.alienor.org
bases-alienor.wedia-group.com
bases.alienor.org
dev.alienor.org
bases.alienor.org
bases-alienor.wedia-group.com
bases.alienor.org
alienor.org
dev.alienor.org
musee3d.alienor.org
bases.alienor.org
la-revue.alienor.org
bases.alienor.org
alienor.org
bases-alienor.wedia-group.com
musee3d.alienor.org
bases.alienor.org
bases.alienor.org
alienor.org
bases-alienor.wedia-group.com
bases-alienor.wedia-group.com
musee3d.alienor.org
amis-des-musees.alienor.org
la-revue.alienor.org
archives.alienor.org
la-revue.alienor.org
musee3d.alienor.org
la-revue.alienor.org
git.alienor.org
la-revue.alienor.org
alienor.org
musee3d.alienor.org
la-revue.alienor.org
git.alienor.org
alienor.org
git.alienor.org
alienor.org
alienor.org
bases-alienor.wedia-group.com
alienor.org
la-revue.alienor.org
alienor.org
git.alienor.org
bases-alienor.wedia-group.com
musee3d.alienor.org
git.alienor.org
dev.alienor.org
alienor.org
bases.alienor.org
alienor.org
git.alienor.org
dev.alienor.org
amis-des-musees.alienor.org
www.alienor.org
musee3d.alienor.org

Certificate

The complete raw certificate details for bases.alienor.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38241590787350174939997933930635885435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bases.alienor.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 997621168587629979804792397318034657566421242351967060702685923503921731846726364189363083826009254137323717288531211445985410828234011369982082661525585959899801936873716361123125435380650701404111023825367894377862921109478321820211232070164748982343798531236712660193867667360239499805728987044061127590698378347325686280166112521090409126344958822070508335524766631700860551170488269911393692493209386466242248005699759747590955544506314541345748504556407088475125032327152663673283643245968394612144018094496265197713162749089050073396585108233197608090835069494087882853786708248866273732302621220286846109349994209951753421036996717913833219377117758719862689876176689395166391197693758298146417118897779418033420293606634751240326934113639270429927216939744702893893742725642085701126740211420138907094692417674806548516877438927857628680594771159387324041398907156627161127370362320137647091091608639884703042808477666550828159834243058958680627944404392207560433843956704271604297406051900985711530796900472309754220133745800410906338918857392270373407394188164548394147974589244446096374346535246674747116977112190134128242879710077390273099405521106368922814009041767895311337493573809766836355254946866416038040220558791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66ed4aae94d8ca4866f30048d0abd5ff03be8451
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bases.alienor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bases.alienor.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000164ea35eac9000004030047304502207a2b08fbbc777a601975196ee38848455438d2e74c4477cb350659280e557a04022100e305f7c3e6d82e9af5268651e30501b6fa56aca142cdea006b99cf1942e96435007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000164ea35eb15000004030047304502207e25e06f134377b69144d5292748b445fdacf1293e53b374453dfe6239126aeb02210080f06df5537e5ebc8ce56ecfc1cc815ed26b2abef92cb68a038d8b7d76dcf4b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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