TBS X509 CA SGC v2012
Intermediate certificate used since November 17th 2012 for TBS X509 SGC server certificates
Initially chained with AddTrust External CA Root - UTN SGC, it is, since December 17th 2015, chained with Addtrust External CA Root (the chain is then shortened and doesn't solicit UTN - DATACorp SGC which is no longer a public root).
The CRL is available here: http://crl.tbs-x509.com/TBSX509CASGC.crl
Certificates issued after November 7th 2012 have the OCSP extension.
Revised version of the original certificate to correct an encoding issue of the X509v3 Certificate Policies field.
It can be imported from this link:
http://www.tbs-x509.com/TBSX509CASGC.crt
Or you can use the text version below.
Hash SHA1: 5857E9523E55CF79976AF3DB15014F0DD8C80870 Expires on: May 30 10:48:38 2020 GMT Key length: 2048 bits
-----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIQVsJIK4OCk2Gz3pTrOidEAzANBgkqhkiG9w0BAQUFADBv MQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFk ZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBF eHRlcm5hbCBDQSBSb290MB4XDTEyMTExNDAwMDAwMFoXDTIwMDUzMDEwNDgzOFow gcQxCzAJBgNVBAYTAkZSMREwDwYDVQQIEwhDYWx2YWRvczENMAsGA1UEBxMEQ2Fl bjEVMBMGA1UEChMMVEJTIElOVEVSTkVUMUgwRgYDVQQLEz9UZXJtcyBhbmQgQ29u ZGl0aW9uczogaHR0cDovL3d3dy50YnMtaW50ZXJuZXQuY29tL0NBL3JlcG9zaXRv cnkxGDAWBgNVBAsTD1RCUyBJTlRFUk5FVCBDQTEYMBYGA1UEAxMPVEJTIFg1MDkg Q0EgU0dDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgOkO3f7wzN6 rOjg45tR5vjBfzK7qmV9IBxb/QW9EEXxG+E7FNhZqQLtwGBKoSsHTnQqV75wWMk0 9tinWvftBkSpj5sTi/8cbzJfUvTSVYh3Qxv6AVVjMMH/ruLjE6y+4PoaPs8WoYAQ ts5R4Z1g8c/WnTepLst2x0/Wv7GmuoQi+gXvHU6YrBiu7XkeYhzc95QdviWSJRDk owhb5K43qhcvjRmBfO/paGlCliDGZp8mHwrI21mwobWpVjTxZRwYO3bd4+TGcI4G Ie5wmHwE8F7SK1tgSqbBacKjDa93j7txKkfz/Yd2n7TGqOXiHPsJpG655vrKtnXk 9vs1zoDeJQIDAQABo4IBszCCAa8wHwYDVR0jBBgwFoAUrb2YejS0Jvf6xCZU7wO9 4CTLVBowHQYDVR0OBBYEFAdEdoWTKLx/bXjSCuv6TEvf2YIfMA4GA1UdDwEB/wQE AwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMDQGA1UdJQQtMCsGCCsGAQUFBwMBBggr BgEFBQcDAgYKKwYBBAGCNwoDAwYJYIZIAYb4QgQBMBcGA1UdIAQQMA4wDAYKKwYB BAHlNwIEATBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3JsLnVzZXJ0cnVzdC5j b20vQWRkVHJ1c3RFeHRlcm5hbENBUm9vdC5jcmwwgbMGCCsGAQUFBwEBBIGmMIGj MD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vQWRkVHJ1c3RF eHRlcm5hbENBUm9vdC5wN2MwOQYIKwYBBQUHMAKGLWh0dHA6Ly9jcnQudXNlcnRy dXN0LmNvbS9BZGRUcnVzdFVUTlNHQ0NBLmNydDAlBggrBgEFBQcwAYYZaHR0cDov L29jc3AudXNlcnRydXN0LmNvbTANBgkqhkiG9w0BAQUFAAOCAQEAWbBsCvzu1FjB CLszoNP/YYeUq1BesivJTzPJ4/7KrceVpbClAkpAaOTZtjW0TLNWTyrDbf5SDl+F 6uHdJH38EH9IO3uskegghpX+IFE9xYoRbUKai1a54edT6wi+HE3bzknr2VVA8eU3 1KfmLgyryjhFc4fSSeXidgybn/YZcvZczX2yAA2/dpldSoMcQAaVIiDEtNe7cn1r +zRVuOe7CEpTs9hMKbvEx20WQ1vRfehJQDrkWV/lICypOBrJDyl6b3rbf+Rb4pJ/ Jdry0afnoiPDI+BNf9UkqI3Nn+mWNyITOFPunH8CL3p5JFsj6R/VeZFxMyOdKUMR hxZ7ZqWhnA== -----END CERTIFICATE-----
Certificate: Data: Version: 3 (0x2) Serial Number: 56:c2:48:2b:83:82:93:61:b3:de:94:eb:3a:27:44:03 Signature Algorithm: sha1WithRSAEncryption Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root Validity Not Before: Nov 14 00:00:00 2012 GMT Not After : May 30 10:48:38 2020 GMT Subject: C=FR, ST=Calvados, L=Caen, O=TBS INTERNET, OU=Terms and Conditions: http://www.tbs-internet.com/CA/repository, OU=TBS INTERNET CA, CN=TBS X509 CA SGC Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:03:a4:3b:77:fb:c3:33:7a:ac:e8:e0:e3:9b: 51:e6:f8:c1:7f:32:bb:aa:65:7d:20:1c:5b:fd:05: bd:10:45:f1:1b:e1:3b:14:d8:59:a9:02:ed:c0:60: 4a:a1:2b:07:4e:74:2a:57:be:70:58:c9:34:f6:d8: a7:5a:f7:ed:06:44:a9:8f:9b:13:8b:ff:1c:6f:32: 5f:52:f4:d2:55:88:77:43:1b:fa:01:55:63:30:c1: ff:ae:e2:e3:13:ac:be:e0:fa:1a:3e:cf:16:a1:80: 10:b6:ce:51:e1:9d:60:f1:cf:d6:9d:37:a9:2e:cb: 76:c7:4f:d6:bf:b1:a6:ba:84:22:fa:05:ef:1d:4e: 98:ac:18:ae:ed:79:1e:62:1c:dc:f7:94:1d:be:25: 92:25:10:e4:a3:08:5b:e4:ae:37:aa:17:2f:8d:19: 81:7c:ef:e9:68:69:42:96:20:c6:66:9f:26:1f:0a: c8:db:59:b0:a1:b5:a9:56:34:f1:65:1c:18:3b:76: dd:e3:e4:c6:70:8e:06:21:ee:70:98:7c:04:f0:5e: d2:2b:5b:60:4a:a6:c1:69:c2:a3:0d:af:77:8f:bb: 71:2a:47:f3:fd:87:76:9f:b4:c6:a8:e5:e2:1c:fb: 09:a4:6e:b9:e6:fa:ca:b6:75:e4:f6:fb:35:ce:80: de:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: keyid:AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A X509v3 Subject Key Identifier: 07:44:76:85:93:28:BC:7F:6D:78:D2:0A:EB:FA:4C:4B:DF:D9:82:1F X509v3 Key Usage: critical Digital Signature, Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication, Microsoft Server Gated Crypto, Netscape Server Gated Crypto X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.12983.2.4.1 X509v3 CRL Distribution Points: Full Name: URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl Authority Information Access: CA Issuers - URI:http://crt.usertrust.com/AddTrustExternalCARoot.p7c CA Issuers - URI:http://crt.usertrust.com/AddTrustUTNSGCCA.crt OCSP - URI:http://ocsp.usertrust.com Signature Algorithm: sha1WithRSAEncryption 59:b0:6c:0a:fc:ee:d4:58:c1:08:bb:33:a0:d3:ff:61:87:94: ab:50:5e:b2:2b:c9:4f:33:c9:e3:fe:ca:ad:c7:95:a5:b0:a5: 02:4a:40:68:e4:d9:b6:35:b4:4c:b3:56:4f:2a:c3:6d:fe:52: 0e:5f:85:ea:e1:dd:24:7d:fc:10:7f:48:3b:7b:ac:91:e8:20: 86:95:fe:20:51:3d:c5:8a:11:6d:42:9a:8b:56:b9:e1:e7:53: eb:08:be:1c:4d:db:ce:49:eb:d9:55:40:f1:e5:37:d4:a7:e6: 2e:0c:ab:ca:38:45:73:87:d2:49:e5:e2:76:0c:9b:9f:f6:19: 72:f6:5c:cd:7d:b2:00:0d:bf:76:99:5d:4a:83:1c:40:06:95: 22:20:c4:b4:d7:bb:72:7d:6b:fb:34:55:b8:e7:bb:08:4a:53: b3:d8:4c:29:bb:c4:c7:6d:16:43:5b:d1:7d:e8:49:40:3a:e4: 59:5f:e5:20:2c:a9:38:1a:c9:0f:29:7a:6f:7a:db:7f:e4:5b: e2:92:7f:25:da:f2:d1:a7:e7:a2:23:c3:23:e0:4d:7f:d5:24: a8:8d:cd:9f:e9:96:37:22:13:38:53:ee:9c:7f:02:2f:7a:79: 24:5b:23:e9:1f:d5:79:91:71:33:23:9d:29:43:11:87:16:7b: 66:a5:a1:9c