secureorder.m.yvesrocher.com.tr

- Laboratoires de biologie vegetale Yves Rocher -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:57:8e:0e:49:11:e6:ea:f2:88:bb:8b:62:69:f1:6d:6c was issued on by GlobalSign nv-sa.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Laboratoires de biologie vegetale Yves Rocher

Organization: Laboratoires de biologie vegetale Yves Rocher
State / Province: Morbihan
Locality: La Gacilly
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:57:8e:0e:49:11:e6:ea:f2:88:bb:8b:62:69:f1:6d:6c
Serial Number (int): 1492254559379845292635641414622694771617132
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 90:94:3c:7e:7a:cf:54:92:dd:f5:db:4e:3f:e4:e0:80:c4:0b:38:50
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 0d:50:05:99:88:34:ea:7d:f0:c3:6b:55:d7:bb:d0:e0:18:da:51:34
Fingerprint (sha256): f9:25:ac:a7:77:d4:9c:4d:a6:17:83:67:c5:e7:e7:bd:b5:10:b0:09:a6:25:59:2e:46:a0:77:f1:37:31:39:ee

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate secureorder.m.yvesrocher.com.tr

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secureorder.m.yvesrocher.com.tr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secureorder.m.yvesrocher.com.tr
secureorder.m.yves-rocher.de
secureorder.m.yves-rocher.at
secureorder.m.yves-rocher.ch
secureorder.m.yves-rocher.es
secureorder.m.yves-rocher.fi
secureorder.m.yves-rocher.no
secureorder.m.yves-rocher.dk
secureorder.m.yves-rocher.se
secureorder.m.yves-rocher.be
secureorder.m.yves-rocher.nl
secureorder.m.yvesrocherusa.com
secureorder.m.yvesrocher.ca
secureorder.m.yves-rocher.ru

Other certificates including the domain name yvesrocher.com.tr

(limited to 100 certificates)
www.yvesrocher.com.tr
www.yves-rocher.fr
anket.yvesrocher.com.tr
www.yves-rocher.fr
www.yves-rocher.fr
prod.yves-rocher.de
www.yves-rocher.fr
newsletter.yvesrocher.com.tr
www.yves-rocher.de
secureorder.yvesrocher.com.tr
secureorder.yvesrocher.com.tr
app.yvesrocher.com.tr
newsletter.yvesrocher.com.tr
www.yves-rocher.fr
anket.yvesrocher.com.tr
app.yvesrocher.com.tr
secureorder.yvesrocher.com.tr
secureorder.m.yvesrocher.com.tr
newsletter.yvesrocher.com.tr
www.yvesrocher.com.tr
secureorder.yvesrocher.com.tr
www.yvesrocher.com.tr
www.yves-rocher.de
www.yves-rocher.fr
secureorder.yvesrocher.com.tr
www.yves-rocher.de
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.fr
prod.yves-rocher.de
prod.yves-rocher.de
newsletter.yvesrocher.com.tr
newsletter.yvesrocher.com.tr
www.yves-rocher.fr
secureorder.m.yvesrocher.com.tr

Certificate

The complete raw certificate details for secureorder.m.yvesrocher.com.tr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT+VkbKGG1yH8+leBe5E
tydzC19KWdP2aKTO9isLCkXdNb2tN4w9A/smtxi5gC/LE1GFJUZBkTZvnZXYGl+a
C1L2QV4+mbkoal1NXKkiipKX2q3wMcTwz4hHtEwgQFn2mOyxyaVKlGO8ZKMZ24GE
6EV33ZsbdYOpfNlJz9Kb+8MjUrRE+XoyU/bx1lCz1BB+po8RAyinHIlCFgLpS3bj
fv97HKJeOtXDY17if2ry3hH4bAX/xNRJ52Qlpi8t6nTIweb1m1bxNAOCPnXhFKYj
W7A+8LdPLtfJJj5hb863at11Q789VtoHKqKM0V5eM0EKxwQJVr4uiNhTXdnO+TiT
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492254559379845292635641414622694771617132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-09 13:34:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-09 13:34:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'La Gacilly'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Laboratoires de biologie vegetale Yves Rocher'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secureorder.m.yvesrocher.com.tr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21365628103716694997508236820673908097105855013750799286580915629540145631213642594545890561304250373743915409707368672619105320111715597444751425161644586932145496806969628924852662019747107921572738033953224385888727137644139694141499781397308397327058078121096320715372632125617885613688283154665790606037746495301190008038840739727292593929362650470191304888176735605380382755972770881380463263581583879530644597419964961255659386872502189608598661277668497650741575212924641017045500555380161889024480305429479673970652160593415878585481803047819035064276965866907489156417636871811441096530229618628176654144257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (429 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureorder.m.yves-rocher.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90943c7e7acf5492ddf5db4e3fe4e080c40b3850
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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