*.warrants.com

- Societe Generale -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:26:d7 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • RawSubject attr oid 2.5.4.8 encoded PrintableString contained illegal characters PrintableString type's alphabet only includes a-z, A-Z, 0-9, and 11 special characters (RFC 5280: Appendix B. ASN.1 Notes)

Societe Generale

Company registration number: bkCkRbHNGPNTFcYq-5k5YUrekVvhEzTP
Organization: Societe Generale
Organization unit: SGCIB
State / Province:
Locality: Paris la Defense
Country: FR

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:26:d7
Serial Number (int): 75479
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: c5:be:4f:36:87:bf:48:54:32:98:0a:b6:e0:bc:ca:c1:b0:6f:ac:15
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 9e:5b:11:4a:ba:e6:74:3f:2e:4a:fd:2a:6d:c2:ae:ad:a0:7e:1d:34
Fingerprint (sha256): fb:7e:8e:03:c7:08:2b:5e:8c:f9:81:ac:48:0c:37:d5:da:b3:92:30:70:a8:12:67:32:9f:dc:3b:ee:13:c8:72

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate *.warrants.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.warrants.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.warrants.com
warrants.com

Other certificates including the domain name warrants.com

(limited to 100 certificates)
*.warrants.com
warrant.com
*.warrants.com
www.warrants.com
www.societegenerale.fi
www.warrants.com
hk.warrants.com
www.solutions.sgcib.com
listedstructuredproducts.com
cortal-fr.warrants.com
listedstructuredproducts.com
www.warrants.com
alpha.sgcib.com
www.solutions.sgcib.com
www.warrants.com
tw.warrants.com
www.warrants.com
*.warrants.com
www.warrants.com
www.warrants.com
www.warrants.com
www.warrants.com
warrants.com
www.warrants.com
warrants.com
www.warrants.com
www.solutions.sgcib.com
hk.warrants.com
www.societegenerale.fi
www.societegenerale.fi
warrants.com
tw.warrants.com
www.solutions.sgcib.com
www.warrants.com
www.solutions.sgcib.com
boursorama-fr.warrants.com
hk.warrants.com
warrant.com
www.solutions.sgcib.com
www.solutions.sgcib.com
www.societegenerale.fi
hk.warrants.com
warrants.com
*.warrants.com
www.solutions.sgcib.com
alpha.sgcib.com
warrants.com
hk.warrants.com
www.solutions.sgcib.com
*.warrants.com
hk.warrants.com
www.solutions.sgcib.com
www.solutions.sgcib.com
www.societegenerale.fi
www.warrants.com
www.warrants.com
hk.warrants.com
hk.warrants.com
www.solutions.sgcib.com
www.warrants.com
www.warrants.com
www.societegenerale.fi
www.solutions.sgcib.com
www.solutions.sgcib.com
www.warrants.com
www.warrants.com
cortal-be.warrants.com
www.solutions.sgcib.com
sg.warrants.com
es.warrants.com
hk.warrants.com
sg.warrants.com
hk.warrants.com
www.warrants.com
www.solutions.sgcib.com
hk.warrants.com
www.warrants.com
www.solutions.sgcib.com
*.warrants.com
es.warrants.com
sg.warrants.com
hk.warrants.com
www.warrants.com

Certificate

The complete raw certificate details for *.warrants.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucKaAqvf+O0KHmLGS8ZW
4ef7gb7yD4S6V2RKxvUtx/jbvfdO0TVFTHEfqBiuRW8P8eXvCXXNPkPrG/6Gbpf+
YdSkKzivqkhL4DSLz5kYHPojtXs/F2QmUd1Cd8pwd/6nwYNrk7kz+KQ99OOrCKFF
rZp4YQRxzlIdJh7lUgzZsSl0QejzWpt1Dza3WaVj1AXwisw/RmrAmNcE24sCHx+O
8KVhKbrxMZ2S6+z4vI/hsuS3DxtTUjJeoG4Aa1CGVQfpq0cuZgOn+JHhELJcQbq8
TDs2vlKRKxuUEkpKyJatY/njPtltY3e6e9wywN/yqIGf+Ft580xDuBxEK45NuZ75
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-01-17 19:47:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-20 07:34:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bkCkRbHNGPNTFcYq-5k5YUrekVvhEzTP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString ''
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris la Defense'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Societe Generale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SGCIB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.warrants.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23450048045828217988763402850113908776774370166493863022214173532584053932481548328671910572918759616416298779407708665331515560984833065811450431712111655773175241085909421485523669184893716267127221399829629869391327395758662281854645298448736022467172439424778550076267334705075055890774340707688846675855001019192978646508858624120845459005411693192458920786660855935768907805123927773324196958748345493425681803020004217044462435738230125314766396810942092904804799091112760141213725851864831109133031810318793418638397370565737392699232843312247466267427605436170682895727316523402035740887143667253600357120261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrants.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5be4f3687bf485432980ab6e0bccac1b06fac15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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