web.epita.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fd:c4:67:7e:21:2c:69:9f:cf:a1:54:01:43:ec:3e:72:3a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web.epita.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fd:c4:67:7e:21:2c:69:9f:cf:a1:54:01:43:ec:3e:72:3a
Serial Number (int): 347689362678240328249851126007260902224442
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:34:9f:1f:6c:ee:e2:ae:d8:af:9b:cf:4a:e5:60:cc:57:65:3b:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:ae:96:fe:ff:58:c9:c5:50:a3:cb:50:43:c2:fe:a9:d2:ec:a4:0d
Fingerprint (sha256): 00:71:a3:ed:2e:f2:a1:61:34:39:ff:3f:f8:af:3b:1f:39:2c:a3:95:f0:b4:a2:ea:96:75:ed:74:87:da:ee:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate web.epita.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.epita.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.epita.fr

Other certificates including the domain name epita.fr

(limited to 100 certificates)
git.acu.epita.fr
web.epita.fr
lse.epita.fr
lse.epita.fr
lse.epita.fr
tips.assistants.epita.fr
sigl.epita.fr
lists.lrde.epita.fr
acu.epita.fr
synergie.epita.fr
gitlab.cri.epita.fr
tips.assistants.epita.fr
epita.net
assistants.epita.fr
toulouse.epita.fr
owncloud.srs.epita.fr
acu.epita.fr
wiki-prog.infoprepa.epita.fr
scrooge.acu.epita.fr
intra.tcom.epita.fr
lama-corp.space
srs.epita.fr
cri.epita.fr
cri.epita.fr
git.srs.epita.fr
srs.epita.fr
acu.epita.fr
static.acu.epita.fr
intra.acu.epita.fr
intrachievement.acu.epita.fr
logement.epita.fr
algo-share.infoprepa.epita.fr
static.acu.epita.fr
git.srs.epita.fr
tips.acu.epita.fr
assistants.epita.fr
bubuntu.net
mail.mti.epita.fr
lama-corp.space
lists.lrde.epita.fr
fic.srs.epita.fr
assignments.lrde.epita.fr
www.lse.epita.fr
lists.lrde.epita.fr
algo-td.infoprepa.epita.fr
synergie.epita.fr
lse.epita.fr
chronos.mti.epita.fr
infoprepa.epita.fr
algo.infoprepa.epita.fr
www.lrde.epita.fr
wiki-prog.infoprepa.epita.fr
web.epita.fr
teamcity.lrde.epita.fr
pantheon.acdc.epita.fr
chronos.mti.epita.fr
rendu.infoprepa.epita.fr
synergie.epita.fr
tickets.cri.epita.fr
keycloak.assistants.epita.fr
intra.tcom.epita.fr
chronos.mti.epita.fr
intrachievement.acu.epita.fr
wiki-root.mti.epita.fr
srs.epita.fr
tcom.epita.fr
lse.epita.fr
lse.epita.fr
lists.lrde.epita.fr
defenses.assistants.epita.fr
www.lrde.epita.fr
tcom.epita.fr
assistants.epita.fr
gitlab.lrde.epita.fr
gitlab.lrde.epita.fr
intra-defenses.acu.epita.fr
lists.lrde.epita.fr
tcom.epita.fr
lse.epita.fr
fic.srs.epita.fr
git.srs.epita.fr
cri.epita.fr
lse.epita.fr
assistants.epita.fr
assistants.epita.fr
algo.infoprepa.epita.fr
tcom.epita.fr
gitlab.srs.epita.fr
prospect.epita.fr
gitlab.lrde.epita.fr
static.acu.epita.fr
photos.cri.epita.fr
git.acu.epita.fr
photos.cri.epita.fr
sni.cloudflaressl.com
chronos.mti.epita.fr
nas.tcom.epita.fr
static.acu.epita.fr
web.epita.fr
lse.epita.fr

Certificate

The complete raw certificate details for web.epita.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtxtOnFTpkxSNO5aM63c2
YuMYBqBP87QxeRg3rvESHmV47akSp/eIx6Oli1LkvoUsALrXXmAO8MS6RuTRA6gI
5KotQSN7NfjKbGWfheXW+5uc+fJFHG26QqOS6oRtmuNMYMF+AHYtLpmCihpUj4e6
9LYWtWYPtceWTKRIIbR5PdBd9fBGWLGFOsLqMF4icw2NC6MQB2XHkPcQcg2ygSZV
i7MfckXdysjhLd2AtGt58KQeSdtWV/jFKETp+awHnnR94AkQbZjjbqQzjJuHukKn
/RPwQoNC3tnDgM1e4AI1oUjV3mf9VihUcy6fcRs0eX7kwi/3gh81U5/UoiJEPg5d
tvxg91LVwIeYUJJZHGdkG8ej2AgSp8Y/JkrmMpTpIEO5sZqY3lhFvreTUcI7mFTD
BISwH6i/I4lz5SNuWLJV7BK6pc3Yn2TgNOvYZ4o8TQHnAIdULF3l+pnlPW8uB3qt
VJ7mW/lAJVN04am2E1MBe0YLxWQ97n+Om1etUdW0M9WS5n8K+j8en3mr2aL4g0ju
+Ftso+fVY+Y7vOzByQ6o1TCTNfpIVU2wv3n77EnGANM2K7xe1xgbJEYiaVJJqFwL
c8z+w1xUB/36/+WgofdADqK+TofVqhnEYsj2daePSgsqKFxm0f1yvP5c4ouPGfzP
+gvxkQuiOz35xfLm3waYFksCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347689362678240328249851126007260902224442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 11:04:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-06 11:04:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.epita.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747010032955898537744886307939640020121181770798850256541012997643880961968061040277081385209859151832223234460692992679382303618589460450175783394885067261463340161858865826622446381755468621756508081921793303043567997332183486364611739277777147978755675167838617754654747499240213528151244758840248350696094907800000468384344716126429475348346827921191102635581500641375505274112599364398548713911307040842280170520632678945161765105906922689874353310788190274745993368590829299225719797829087219737706449581008936391181358513601223572432984285014512781872588593722607101906279429450152878864005179105641714031062897795287465272834150432122327654866610183233951296005039550331536460850367216533536512494772471529713898828353655530885063727531986656296337385353122228513809504472790230896672513660125276790874549543241766855332483268371956487525018856755652506797268458589921354893665775545914931374615423785932778515325372382308439916271215800167136048776684915750989610269861345944467640979530645420734849055550508973509447732991005473122580235394547041964871190854360912650873671018002353572444949510808531627522455931743507687437558440232757695091133294460809146962631389649848382390606963090469801661396628496533828461326243403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e349f1f6ceee2aed8af9bcf4ae560cc57653bc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.epita.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bd17873df0000040300463044022067f153fcd6be39de09f545ce5e4d0374c9820bbc5f85f49a3e26562801153bb10220386555ebd4977e91702416bb834bf87f3f7396f31b6cbec0e71c36585310b974007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bd17875b50000040300463044022013c380f1f94c830fe05ca851ad1a75a4ce01ff723ed85513b217942b6bdc46bc0220501cfea07a58db8cc0af40df177092213e7941189d9b8c7d7074cfdd25529d3e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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