TBS X509 CA pro hosting v2012
Intermediate certificate used since November 17th 2012 for TBS X509 multiple sites server certificates.
Initially chained with AddTrust External CA Root - UTN SGC, it is, since December 17th 2015, chained with Addtrust External CA Root (the chain is then shortened and doesn't solicit UTN - DATACorp SGC which is no longer a public root).
The CRL is available here:
http://crl.tbs-x509.com/TBSX509CAprohosting.crl
Certificates issued after November 7th 2012 have the OCSP extension.
Revised version of the original certificate to correct an encoding issue of the X509v3 Certificate Policies field.
It can be imported from this link:
http://www.tbs-x509.com/TBSX509CAprohosting.crt
Or you can use the text version below.
Hash SHA1: 0DFE85031E40D8B8DD9E466F32800AB34380A9B2 Expires on: May 30 10:48:38 2020 GMT Key length: 2048 bits
-----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIQYR/CwIWQLjlJGJXZpNwKcjANBgkqhkiG9w0BAQUFADBv MQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFk ZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBF eHRlcm5hbCBDQSBSb290MB4XDTEyMTExNDAwMDAwMFoXDTIwMDUzMDEwNDgzOFow gcwxCzAJBgNVBAYTAkZSMREwDwYDVQQIEwhDYWx2YWRvczENMAsGA1UEBxMEQ2Fl bjEVMBMGA1UEChMMVEJTIElOVEVSTkVUMUgwRgYDVQQLEz9UZXJtcyBhbmQgQ29u ZGl0aW9uczogaHR0cDovL3d3dy50YnMtaW50ZXJuZXQuY29tL0NBL3JlcG9zaXRv cnkxGDAWBgNVBAsTD1RCUyBJTlRFUk5FVCBDQTEgMB4GA1UEAxMXVEJTIFg1MDkg Q0EgcHJvIGhvc3RpbmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB pzuJ6hKOHo7IL0mQDL5PnYgi0jyGDTfCMBDhr+2iPs6eKUHBYPwU18N8BF2AaH9m BPmd7a0xd1lHOMYfGiJKk9KlwB4R71mOIIKDIaW3CIs+uUEcFN0dQKp/yJo9KayP kABwSx7VnZStMhY206iJWplK4CN7NMsYoHjEDHfERXcrUMPUsJqNJGpIOwd/KAmG ucI3748xvYGg7hTSYiO26jAlo0SU9HpR2+lA9d84oYcyX0Wv2XYbnMYAF7FK5Ncw i1EDpqAdGU4zkCldAbfQ1r03ubi8yQQreSUP0vXm6j+mmuTPTFwaiJ4KgdtnR8Qn 5LT2PGQLXeKIExIkfcMhAgMBAAGjggGzMIIBrzAfBgNVHSMEGDAWgBStvZh6NLQm 9/rEJlTvA73gJMtUGjAdBgNVHQ4EFgQU1DSIQiybwqCeXfYZWY30EgEaO1wwDgYD VR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwNAYDVR0lBC0wKwYIKwYB BQUHAwEGCCsGAQUFBwMCBgorBgEEAYI3CgMDBglghkgBhvhCBAEwFwYDVR0gBBAw DjAMBgorBgEEAeU3AgMBMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6Ly9jcmwudXNl cnRydXN0LmNvbS9BZGRUcnVzdEV4dGVybmFsQ0FSb290LmNybDCBswYIKwYBBQUH AQEEgaYwgaMwPwYIKwYBBQUHMAKGM2h0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9B ZGRUcnVzdEV4dGVybmFsQ0FSb290LnA3YzA5BggrBgEFBQcwAoYtaHR0cDovL2Ny dC51c2VydHJ1c3QuY29tL0FkZFRydXN0VVROU0dDQ0EuY3J0MCUGCCsGAQUFBzAB hhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMA0GCSqGSIb3DQEBBQUAA4IBAQAG Hp7yfIJdcUGsYd65wn7iGwXXN4IQynwNm8npHDniee261BK6njuE6BToS6BndtdC wIOaWQmo3avRJyJ4qzt3FnR55SCPEvo6mS/13Va9V98nJutEyeOJRuqyNSg7Hj9G ObQCoIvuQ9G63dUXm8qKahJfITjCasollsXVYJDBVKdxrIE/hk7dOrdVZHAM4rit 8eAS9RYLNrcL558D1ccPGuIksMPFlX8pO03Slj/QX7Lw73CbIP/MPuAuamop+bXM pWi5bndhZNpLKZ+4w/I001pH/BIF8uFHh5AR41VY0dDizWpXiSU006+K5LWTIUTX B0rrFW3NLXPrd85/Jij0 -----END CERTIFICATE-----
Certificate: Data: Version: 3 (0x2) Serial Number: 61:1f:c2:c0:85:90:2e:39:49:18:95:d9:a4:dc:0a:72 Signature Algorithm: sha1WithRSAEncryption Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root Validity Not Before: Nov 14 00:00:00 2012 GMT Not After : May 30 10:48:38 2020 GMT Subject: C=FR, ST=Calvados, L=Caen, O=TBS INTERNET, OU=Terms and Conditions: http://www.tbs-internet.com/CA/repository, OU=TBS INTERNET CA, CN=TBS X509 CA pro hosting Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:c1:a7:3b:89:ea:12:8e:1e:8e:c8:2f:49:90:0c: be:4f:9d:88:22:d2:3c:86:0d:37:c2:30:10:e1:af: ed:a2:3e:ce:9e:29:41:c1:60:fc:14:d7:c3:7c:04: 5d:80:68:7f:66:04:f9:9d:ed:ad:31:77:59:47:38: c6:1f:1a:22:4a:93:d2:a5:c0:1e:11:ef:59:8e:20: 82:83:21:a5:b7:08:8b:3e:b9:41:1c:14:dd:1d:40: aa:7f:c8:9a:3d:29:ac:8f:90:00:70:4b:1e:d5:9d: 94:ad:32:16:36:d3:a8:89:5a:99:4a:e0:23:7b:34: cb:18:a0:78:c4:0c:77:c4:45:77:2b:50:c3:d4:b0: 9a:8d:24:6a:48:3b:07:7f:28:09:86:b9:c2:37:ef: 8f:31:bd:81:a0:ee:14:d2:62:23:b6:ea:30:25:a3: 44:94:f4:7a:51:db:e9:40:f5:df:38:a1:87:32:5f: 45:af:d9:76:1b:9c:c6:00:17:b1:4a:e4:d7:30:8b: 51:03:a6:a0:1d:19:4e:33:90:29:5d:01:b7:d0:d6: bd:37:b9:b8:bc:c9:04:2b:79:25:0f:d2:f5:e6:ea: 3f:a6:9a:e4:cf:4c:5c:1a:88:9e:0a:81:db:67:47: c4:27:e4:b4:f6:3c:64:0b:5d:e2:88:13:12:24:7d: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: keyid:AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A X509v3 Subject Key Identifier: D4:34:88:42:2C:9B:C2:A0:9E:5D:F6:19:59:8D:F4:12:01:1A:3B:5C X509v3 Key Usage: critical Digital Signature, Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication, Microsoft Server Gated Crypto, Netscape Server Gated Crypto X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.12983.2.3.1 X509v3 CRL Distribution Points: Full Name: URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl Authority Information Access: CA Issuers - URI:http://crt.usertrust.com/AddTrustExternalCARoot.p7c CA Issuers - URI:http://crt.usertrust.com/AddTrustUTNSGCCA.crt OCSP - URI:http://ocsp.usertrust.com Signature Algorithm: sha1WithRSAEncryption 06:1e:9e:f2:7c:82:5d:71:41:ac:61:de:b9:c2:7e:e2:1b:05: d7:37:82:10:ca:7c:0d:9b:c9:e9:1c:39:e2:79:ed:ba:d4:12: ba:9e:3b:84:e8:14:e8:4b:a0:67:76:d7:42:c0:83:9a:59:09: a8:dd:ab:d1:27:22:78:ab:3b:77:16:74:79:e5:20:8f:12:fa: 3a:99:2f:f5:dd:56:bd:57:df:27:26:eb:44:c9:e3:89:46:ea: b2:35:28:3b:1e:3f:46:39:b4:02:a0:8b:ee:43:d1:ba:dd:d5: 17:9b:ca:8a:6a:12:5f:21:38:c2:6a:ca:25:96:c5:d5:60:90: c1:54:a7:71:ac:81:3f:86:4e:dd:3a:b7:55:64:70:0c:e2:b8: ad:f1:e0:12:f5:16:0b:36:b7:0b:e7:9f:03:d5:c7:0f:1a:e2: 24:b0:c3:c5:95:7f:29:3b:4d:d2:96:3f:d0:5f:b2:f0:ef:70: 9b:20:ff:cc:3e:e0:2e:6a:6a:29:f9:b5:cc:a5:68:b9:6e:77: 61:64:da:4b:29:9f:b8:c3:f2:34:d3:5a:47:fc:12:05:f2:e1: 47:87:90:11:e3:55:58:d1:d0:e2:cd:6a:57:89:25:34:d3:af: 8a:e4:b5:93:21:44:d7:07:4a:eb:15:6d:cd:2d:73:eb:77:ce: 7f:26:28:f4