societegenerale.se

- Societe Generale SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:5e:3d:d0:6a:fc:4e:37:13:89:c8:06:61:2d:59:a1 was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale SA

Organization: Societe Generale SA
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:5e:3d:d0:6a:fc:4e:37:13:89:c8:06:61:2d:59:a1
Serial Number (int): 20427749581030067317686980810082441633
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f5:7b:66:6b:cc:2f:2d:7d:f3:08:42:be:19:a6:d6:d4:9d:1e:5f:b1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): c1:14:5f:7b:fc:5a:3a:c9:a2:cc:c6:85:b9:d3:37:1a:7a:b6:da:18
Fingerprint (sha256): ed:80:bb:61:34:a0:93:f6:11:36:c8:9b:3d:d6:63:e8:71:b8:39:1b:6b:df:d2:e2:da:b9:db:db:65:79:de:30

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate societegenerale.se

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for societegenerale.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

societegenerale.se
immobilierpro.societegenerale.fr
www.openinnovation.societegenerale.com
globalsolutioncenter.societegenerale.in
www.globalsolutioncenter.societegenerale.in
equityderivatives.com
www.immobilierpro.societegenerale.fr
sgequityderivatives.com
www.sgequityderivatives.com
openinnovation.societegenerale.com
ventures.societegenerale.com
www.ventures.societegenerale.com
www.equityderivatives.com
www.societegenerale.se
swapdisclosure.sgcib.com

Other certificates including the domain name societegenerale.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for societegenerale.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjWt4rxESASk2ZfgdCGR
2nlvuENjxD3O8DCRCX8pQAC3emimop8/ERdQ2Xvd82tiGsOEW4MRP78gBV54+w2D
NZj82OgR4/nrii/oC+J7XuYmyGOj0uvUTyuZa00Ww8C828ahEjqmgkdppEEwbWz/
OELl+GeZczS/OQTpECdJDpXNGUloDUTQN9KqEcfKjVEl+843jr/bww3kK1irEGxv
iZfRzDnikTQFKLVFX9ij+mxcyWG4buhjc6s9Prb+7SLsNBH7Myz/MbQE5jCYQ4yB
Q6gweA5TbwaDWtlJWQByR3sfzxc7P6PqG7W3rkvZfCgjhOoE/AgOt5HXyw/QuzBZ
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20427749581030067317686980810082441633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Societe Generale SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'societegenerale.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21486982064504926097991837316125818066751453350382632525813278745836908960215873707018638172898211699353981668114005375591548628379855699544388371806229090158607575331600560003724562732838151221454396249072921699787441914664889344529146652317867893632979035254240668107251067631333125263012771344690877635663033012987644989743076878285826367295509401881193844022230105493706014629357952968727036364539382775774953895669072285532978594465375783202741973014401175048789485196102174173408002156613419385955439528232411612473739625542462848901359313899496208725738315786185856497282055482624187403065891277632706224085319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f57b666bcc2f2d7df30842be19a6d6d49d1e5fb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (476 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'societegenerale.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilierpro.societegenerale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openinnovation.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsolutioncenter.societegenerale.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalsolutioncenter.societegenerale.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equityderivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immobilierpro.societegenerale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgequityderivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgequityderivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openinnovation.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventures.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ventures.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equityderivatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.societegenerale.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swapdisclosure.sgcib.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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