www.vitrier-manosque.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:64:b4:38:6c:21:ba:99:6b:32:ff:4f:29:01:83:c2:30 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.vitrier-manosque.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:64:b4:38:6c:21:ba:99:6b:32:ff:4f:29:01:83:c2:30
Serial Number (int): 299582341447820893650093363882567686930992
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:af:cf:6f:17:7d:25:fc:4e:42:63:58:7c:6b:94:10:98:fa:05:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:7e:c6:d4:6d:aa:4b:f6:40:43:dd:45:e8:41:20:af:90:e6:64:47
Fingerprint (sha256): 00:00:96:88:4d:cb:d2:49:37:72:be:a9:a5:1d:40:6e:68:e1:9d:9d:66:62:5f:90:0f:6c:8b:60:38:48:cc:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.vitrier-manosque.fr

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vitrier-manosque.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

serrurier-aix-en-provence-13100.fr
serrurier-manosque-04.fr
vitrier-aix-en-provence.fr
vitrier-manosque.fr
www.serrurier-manosque-04.fr
www.serruriermanosque.fr
www.vitrier-aix-en-provence.fr
www.vitrier-manosque.fr

Other certificates including the domain name vitrier-manosque.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.vitrier-manosque.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG3DCCBcSgAwIBAgISA3BktDhsIbqZazL/TykBg8IwMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MDgxMDQ4MDBaFw0x
NzA3MDcxMDQ4MDBaMCIxIDAeBgNVBAMTF3d3dy52aXRyaWVyLW1hbm9zcXVlLmZy
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuPhco4y6v7W42GZZrDpm
Y79n55CZ800+Rd67H84q2D1t6wkbUKO2Sn1uya/kvkZXp/M27GFVOIDstnIbn1Cw
t1qk44wAwA3wtD43f7Rd9U1wLf4b+1mwgPrZt2FfGns//dXfKqyxt6P0izExe/dQ
sEGrAHp42dJYhDZeysZDooHzQq7XXP8Fa7dKsSH5t4AK70K3cSXgHyHs6KV9cQKX
OOGa3FvBjzDwvl4G7rSq9P45oyI/lyNdQXPYKMAPzzGSe9dBc+tCDQcAbH+iDrHG
74rY1wHe6OHQwnOHw8/NHzJdpSKx2ee+lbRfcxbnZkpm9k+etqJWPUhoIv03gcm/
yKLs9jps6QrWDIxsfOKlyFhjwvNYlqa76VGUETDMOx80RpjEUC2F+8dCgoMJpNjf
Q8XQnKWy/rHkDQ0gkrsddR3x0P2U7jZGpNbNJ/3K70HjFnyhSpzLgHGyO63kItEg
7GldgN/PdH3u6OjY64B41pvoW48v5j9XNfJ3zuoMrGsEOFA0zGDVLpV8zmRMmIy7
TsHO0FqyeeF4IicuIZ09pfGQTok1CNQuHoBXoYPsQwFZZ13vxGcYFii/l0fnQ3qU
2YECdLSxwNp3FXQQFhpjaf3csJrK6xcDmNqejDsw5AwWvBmtBddfMuJmArkzrkIs
HPbD2g954Fncb3Ec00q4CkkCAwEAAaOCAuIwggLeMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQURK/Pbxd9JfxOQmNYfGuUEJj6BYUwHwYDVR0jBBgwFoAUqEpqYwR93brm
0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8v
b2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wgesGA1UdEQSB4zCB4IIic2Vy
cnVyaWVyLWFpeC1lbi1wcm92ZW5jZS0xMzEwMC5mcoIYc2VycnVyaWVyLW1hbm9z
cXVlLTA0LmZyghp2aXRyaWVyLWFpeC1lbi1wcm92ZW5jZS5mcoITdml0cmllci1t
YW5vc3F1ZS5mcoIcd3d3LnNlcnJ1cmllci1tYW5vc3F1ZS0wNC5mcoIYd3d3LnNl
cnJ1cmllcm1hbm9zcXVlLmZygh53d3cudml0cmllci1haXgtZW4tcHJvdmVuY2Uu
ZnKCF3d3dy52aXRyaWVyLW1hbm9zcXVlLmZyMIH+BgNVHSAEgfYwgfMwCAYGZ4EM
AQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0
ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5k
IG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kg
Zm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJ
KoZIhvcNAQELBQADggEBABuvvXrkWPiZV3S19WV3LkV/3EPBoqIDb4aHWmVqjhRz
Nl3hZ9JkZRViwMCHen9eePQdvBXIlUtMv02Pex82Ajq5CFFonjf94ctNmWrryuRY
9Ok3U+3gLlUZ2ZzjSYHy53iaUaUuSrLrIEZLLSfgootE5PCMPNKTwgtPafAYAhhS
EPo2a51BuotzLELNd1IXGPTeb3lJcCThi+yUKjKDPAwV8NeqDpinfZUtyAWTkLlg
sLNzFMTcMNGIJV9fJofOpvFccj9NYucxbP4Y4YJZkcr+UxHQXnOjMPZfJhPyIMir
2UrrfRCi4S0QuEfhe+KW1XiyevEl7DnQbz5rRWpNfoM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299582341447820893650093363882567686930992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-08 10:48:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-07 10:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vitrier-manosque.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754612430515689051338191267852122612274621106333356600588540855453480563795858038686443841298004627548227598627124321928961853702052209606937158496580670748094049298343678552697761470262781045340802923455932528608306551959709656375711719385022086929648410285949025582714277310974568105189742328386499377194946871205619051199124560464926703145985462423119129294903437420889177435429568038983800528358116887307339598196731746835440516074374189217844232627276622588044324426633845332428112086960150056890769144757845552051919587194068544956764118904353052433257916256464705348402703454505846857052525089517332420045136493731422588844216791735663820807298164316019773137572862064901212838184887335945667464686053777571511624746669903133848048047481941739395760597987568391725344268012415191089893625495510876166028916063001678081893607681137331385608947894128025944959695266725056416182093618490767699999645408324578436464466206655395455088945457277573078204090815002947995442085334076456402938618993341453514816263740294626168517732308626869985073998700014824772885644626389463766544755951531074681589023005293326345772166611001041543741926168571985745920202348069220898837359514423541455373913171814469787221731510042169187577454135881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44afcf6f177d25fc4e4263587c6b941098fa0585
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (227 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrurier-aix-en-provence-13100.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serrurier-manosque-04.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitrier-aix-en-provence.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitrier-manosque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serrurier-manosque-04.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serruriermanosque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitrier-aix-en-provence.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitrier-manosque.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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