DV SSL/TLS Certificate for lionschamberyaixdoyen.fr

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the lionschamberyaixdoyen.fr DV SSL/TLS Certificate

This certificate with serial number 06:29:1a:92:8d:64:0c:db:fe:7c:6a:2a:f3:91:b8:1f:8d:8a for lionschamberyaixdoyen.fr was issued on by Let's Encrypt.

With 3 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for lionschamberyaixdoyen.fr provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:29:1a:92:8d:64:0c:db:fe:7c:6a:2a:f3:91:b8:1f:8d:8a
Serial Number (int): 536660613505298260922231468745214704717194
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: b7:86:bb:5b:f5:61:7c:8c:52:81:da:9b:60:a2:a2:bd:6b:cf:e0:40
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 36:ed:26:df:90:a2:b8:14:5a:41:94:3c:8e:ea:9c:bf:66:c3:fb:b2
Fingerprint (SHA-256): 77:87:1e:34:40:bc:21:ab:c0:38:69:c7:1a:37:cf:bf:38:a1:3d:a5:81:e5:cb:dd:08:50:2e:06:72:74:d0:3c

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/11.crl

Check the revocation status for certificate lionschamberyaixdoyen.fr
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for lionschamberyaixdoyen.fr

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for lionschamberyaixdoyen.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnVX/mUMgJ+sVqBiVJYH
4WUUfbZK2k18eNzndEo1S8bwzNbJO1dVi0YKhEK/6MgguXWzkB/o1VdQJ042eXfQ
5B3IGfRY79e6gNdtjxjv6hIWvCVgqKzM7mCH0D9MWMngoTdNOxY9ZJfuTiGFrlT3
Y7T4HjCbCwdYgUYe6BQTNuEO7SS/59qXL58j1vc5H82ZStjcWmww2KVJdLyWu2mK
gmrdVzAWzMni1aRDITIDPGghK3LHpy5zUlS+fc3NPaly/uCi5TvS8cx1dkSow7Oc
9gENvwzC0edI3wit7cEh1cvtqTJjizDQLQ8plqfZSpT2C4Pxy54qxNhesbBRC0oP
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 536660613505298260922231468745214704717194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-20 04:24:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-18 04:24:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lionschamberyaixdoyen.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24548095511095858667342967741998334470466957004108854037151020043561851587257282743371399167689711645913438337516486972098539272002289960076313846852967880544030715911517818026199778957108265426432979243928432563392182528823921422020379800594342311310289242829763835092686159630847905129662943847066641830372269843899427712309577210976145697086887804259892225570517736528960588278997373454762216979074413663708127854050927493002534714486061746167214376075181293880126619797007407461002373242247058154440513310240260618869464513907514477232073366911560312002880441515874640028254470654768468105088099725558203904823257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b786bb5bf5617c8c5281da9b60a2a2bd6bcfe040
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionschamberyaixdoyen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lionschamberyaixdoyen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lionschamberyaixdoyen.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/11.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b8000001978bca9f5b000004030046304402206cfe077cfa0c2ba2757912ee16dbb34f411a9958a271c7955a3980e1eb59782e02204550fa6a0e5c6d2c4cbcd8dc576b3993e2ef0522078ca40cb6c20be77b02639400770012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001978bcaaef40000040300483046022100bf0c1000b5f04341bc3d0a0468808de8f8a4b1de084fcce0a49849d35e71fd70022100c202cc4c026ecf6dd1c59a7255c297c2efd68437b3c6d608251ce218be4fcfce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a2d037649014e8fc4fa63e3dae9127fe6cb64cb4ba6d000491106ba005c3f177383436b21d82a40ae26ddb76d8d766dfb6caa9cd08284cb3de0eb7baf266398556f2083f935e732aaa5a23020a9a507af277d14b202c676b4cf1fb7b9b19bdf924da39b8b2fa6bf9a768f09a99bbe840b78e2f545826ee3e03b3ca54f15e15bc5c681190349abbcaba5bd78ad1be0aba458aed19aaacb85a2d2fc09a5898ba1bf6b16553efb1853ba6f1d51f849036cf255d8ae419d953b59a535251545be8772df5a8cc2f646e40e743d46ee1de0b962900c33a2cb1c667371e2c294c3dcc7dbeee869a2a6a4b555b3560061d20dbf0f3436d6bf5d55a485364ffa26ea938f