Issued by Let's Encrypt Authority X3
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
RSA
4096
SHA256 with RSA
Digital Signature
Key Encipherment
Server Authentication
Client Authentication
8 extensions
No
unhandled critical extensions
This is not a CA certificate
-----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgISA11iPo1iqzBSNmISdrRo+k+KMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEyMDUwNDMzMDBaFw0x NzAzMDUwNDMzMDBaMBoxGDAWBgNVBAMTD3d3dy5wcmV6aW9zaS5mcjCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALzL30xuiMHbwb7KLegDsOV0j+SyKr1h DW8anWUGjCbw3VVB48mcBm0zCEWHnoiLy/VA/cnE6e4pgjhInTy/ULqEmEPzKlwv UJ0t+Os1GChiUQdZZhFcyEloEvG5Bv2j8xVczxLCE9flPEVPQRVuxtzyErgYXa+Y /zQwVsUyiTwpaDTTypNmIjRRZFSMazdYyMVHt+gRmQmzQEX6QxDxh1VRclYj2nPV CHZNh3NOMjJameei1iDcSABGuQxeC51uVMbsXW8X3pFwYzyX55fPx/EqyEm93sup q48l7ODcgICMarlStWZtCB5P5sepsRMXVY5XbxKdNObAlrqcsdumvwV/TEUZftpF /3zsVRF/dHM9g7HVF2YX887AvuIRD84UCQ85Jo3/oar6rpFPJdEdynFZ2NkDJzEU fJ+zK98XQVrFySZYB/lO8WmWMafqvxLPe4JHY1qLdzASlB+SPHkOaulXgzhD9Gm4 oRRQOdVakqOw45ycHgvT3dhyeWbS3RaGttt7VLC1RwOtpF2xYBqL8vsGI3/UCw0n /MpMwFM1G3Kxl+k4t0aG64tsVzrPkhntUs1XFcZfk6FySTEPPK00BnJG+co9NmGY 4VSOMbqHA2JtK6EziTqEoK8UCw+J4Gyi0YGHcZkJ2YEFFrUfkRpOvAziIVrACtNw 8uQ4sRhtwjDtAgMBAAGjggIdMIICGTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMHZ 7hP5suLz8+gUPpXUd9TTXJEeMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMCcGA1UdEQQgMB6CC3ByZXppb3NpLmZygg93 d3cucHJlemlvc2kuZnIwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQB gt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJl IHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2Nv cmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRw czovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOC AQEAcP/OMrmW2DbYjRlNGan5qGfwtFguJazW5lBzl4aX72cxzddyPf3JLvw4eKrw 3+xgYZuKZvXSkbSoctyxH6lUDk0k21Eb+mxMHfVDTK1sQyN+dNCQNhX5HWrJ9yPe 65Ji95RLAgbLpOXJP42dQaYZ20k3TNmj7hkR4o8pXqeE0SrDEUUY0Au1di8NjV72 Y5P8OBekICZ80wpXwsAdUXFOJF48sWtcj5ekJyRBa93slXIWtC86pPvhaZf13IFY zkPMPe9QHIA5nZEOttizSO9+CnrlDiCtKAJRCar/k0FgaYnMiofuSoCF2Mrbvvqx QO5on402eDwjna6n+01266HDUw== -----END CERTIFICATE-----
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvMvfTG6IwdvBvsot6AOw 5XSP5LIqvWENbxqdZQaMJvDdVUHjyZwGbTMIRYeeiIvL9UD9ycTp7imCOEidPL9Q uoSYQ/MqXC9QnS346zUYKGJRB1lmEVzISWgS8bkG/aPzFVzPEsIT1+U8RU9BFW7G 3PISuBhdr5j/NDBWxTKJPCloNNPKk2YiNFFkVIxrN1jIxUe36BGZCbNARfpDEPGH VVFyViPac9UIdk2Hc04yMlqZ56LWINxIAEa5DF4LnW5UxuxdbxfekXBjPJfnl8/H 8SrISb3ey6mrjyXs4NyAgIxquVK1Zm0IHk/mx6mxExdVjldvEp005sCWupyx26a/ BX9MRRl+2kX/fOxVEX90cz2DsdUXZhfzzsC+4hEPzhQJDzkmjf+hqvqukU8l0R3K cVnY2QMnMRR8n7Mr3xdBWsXJJlgH+U7xaZYxp+q/Es97gkdjWot3MBKUH5I8eQ5q 6VeDOEP0abihFFA51VqSo7DjnJweC9Pd2HJ5ZtLdFoa223tUsLVHA62kXbFgGovy +wYjf9QLDSf8ykzAUzUbcrGX6Ti3Robri2xXOs+SGe1SzVcVxl+ToXJJMQ88rTQG ckb5yj02YZjhVI4xuocDYm0roTOJOoSgrxQLD4ngbKLRgYdxmQnZgQUWtR+RGk68 DOIhWsAK03Dy5DixGG3CMO0CAwEAAQ== -----END PUBLIC KEY-----
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 293113707052557262351462547967688125861770 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-05 04:33:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-05 04:33:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.preziosi.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770222015475942638756302954156207994155196348156382384828275766324111203066500836273492528461575053457677843271107329004767246968418506694178434817366227693390018703272194977642200754593777903812784914783909082580076040408183190161446282915364635086076823829497477202563509767572682944674364044947643452688069951015771166571000421083455968546127569099203514417219717121401734779623059173403106886341731173349348168877461782544813475369562655630566513983489401106330453139758498824429890973466187771119909454973394730860174691623412974029095825846792056256044620318728480793999597494563097954717937701039294747567529485380227143197343753213281916231173696874076925720998684636136631178741347831384840084353572545462576314900722398952920624577694755446093916721267909318005169259375532464322463905109197080707686264754979393429335447548118438161442928391100866810969307430312596813532334374966401810062805053311760773681760676247363681874798662335036576850506498539353371170441181613225130484269516241979522381100338575530633774853121902094757260391748132584677588400250384123832637512619205871777374223300739821598722694624860378895117786230998463264165275450499259690118107032864774103515933094709930052037664932096577670193782862061 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c1d9ee13f9b2e2f3f3e8143e95d477d4d35c911e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preziosi.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preziosi.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0070ffce32b996d836d88d194d19a9f9a867f0b4582e25acd6e65073978697ef6731cdd7723dfdc92efc3878aaf0dfec60619b8a66f5d291b4a872dcb11fa9540e4d24db511bfa6c4c1df5434cad6c43237e74d0903615f91d6ac9f723deeb9262f7944b0206cba4e5c93f8d9d41a619db49374cd9a3ee1911e28f295ea784d12ac3114518d00bb5762f0d8d5ef66393fc3817a420267cd30a57c2c01d51714e245e3cb16b5c8f97a42724416bddec957216b42f3aa4fbe16997f5dc8158ce43cc3def501c80399d910eb6d8b348ef7e0a7ae50e20ad28025109aaff9341606989cc8a87ee4a8085d8cadbbefab140ee689f8d36783c239daea7fb4d76eba1c353