francecheval.fr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:56:d1:a5:63:ca:fb:e0:9e:07:64:f7:35:66:ac:1a:3e:8f was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=francecheval.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:56:d1:a5:63:ca:fb:e0:9e:07:64:f7:35:66:ac:1a:3e:8fSerial Number (int): 290879808754622745334233344252439816715919
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cd:ab:20:6b:cb:3f:81:bf:85:0c:a9:88:f1:31:4e:59:f7:8f:8a:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7f:dd:2a:43:f0:8b:5d:5d:7c:d1:4c:82:7c:6b:98:9a:35:d4:29:1d
Fingerprint (sha256): 02:a1:52:a8:ad:01:ec:50:a2:c1:2e:07:31:7a:a4:4f:10:d2:19:8f:a0:70:c9:25:78:a2:e3:ae:4c:03:28:a5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate francecheval.fr
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for francecheval.fr
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
admin.francecheval.fr
francecheval.fr
www.admin.francecheval.fr
www.francecheval.fr
francecheval.fr
www.admin.francecheval.fr
www.francecheval.fr
Other certificates including the domain name francecheval.fr
(limited to 100 certificates)
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
www.francecheval.fr
francecheval.fr
admin.francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
www.francecheval.fr
francecheval.fr
admin.francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
francecheval.fr
Certificate
The complete raw certificate details for francecheval.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISA1bRpWPK++CeB2T3NWasGj6PMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA3MjgxNDU1MDBaFw0x NjEwMjYxNDU1MDBaMBoxGDAWBgNVBAMTD2ZyYW5jZWNoZXZhbC5mcjCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMux6XGLn+jW0Dc1zaNrqxBJ2U3KlCip /16lmg8LfeA4TBnU/p+RTRM6/UR8lvVa1+5cPqXL4qsq/gOClNgnhsJc5vjgTdSQ WtEVAfZ8MMXYqPoT6ew0L6cGkAyKxMNQ79ppBt7HRMZE6rX2uzQssJRg+/eqp5im v/lsutDEfxDoO/e/Ib36D7v+rbRe3Zn2C4xWs2QJQTSzs2DQNQoacY7g3cX4FR7J tP6P94KNPKX7TGi0w2scl2xcm/TyRWvpTwqzKQaO7X4HZjfYev9cV038/0Bx2TvX IskM0UC+egScbZi8vyiL0LMUIFnircj5Uv3cevbq6TFbxGR8ec/9+yLaQ+wHEEtY 4CPFomm+awG0pzWRDjuyjNPxw6VQUCUdpVO+jkQl6POHumRz9eRdI0td6sCtkHBy Q5BUeBKfDOdkEjhhgABE2LC2vnw+tCWZv1Mz7qv9XaG9WmcWcJ7uhYUqD+AHRO6J 1elmy/nh3HZAawd47kN3LEgnAEvIcqv026cxBA9r8kaXvc0a7xYRNiHJk9E6r/gV FPUf2CIWV5kYyj78FX9lYmv6To/q90yTQorfeNdoFbWYHdeecGunhow2d6IBVos8 xdmxdrbw9WsJC0k6k1EF+6vzkgtpMYdTZHtm7PD51BYHhcn7FWjwP5lJahAlVA4b clMc/sUahCHHAgMBAAGjggJXMIICUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFM2r IGvLP4G/hQypiPExTln3j4o/MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMGEGA1UdEQRaMFiCFWFkbWluLmZyYW5jZWNo ZXZhbC5mcoIPZnJhbmNlY2hldmFsLmZyghl3d3cuYWRtaW4uZnJhbmNlY2hldmFs LmZyghN3d3cuZnJhbmNlY2hldmFsLmZyMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIB MIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz ZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBt YXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9u bHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91 bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZI hvcNAQELBQADggEBACeC4Y2VeHssrApAoURCdVWKnyjOoAn1usjsKbX/qJN0yYRj B/ffrVoluSm+VJNQuJ5jCUTW0vwkbBANo1SEJXmuXrS5tkZoTRylEGx9p6Z7r+rj a5SWYIcZpBFy/1om9G6Fl4aMmnB6rGzHV33uDLDKkfeIob814SxpznDQGmOcABYz rD/FGCVJ63PCgqu2D9baDEovSrXfoc394dI7zZy5ezT+nFV885gCm90OHrkiAs09 l7DAEvzeWqsKVknMN7xy6TUfCc5xw0ANP8mUgF4Wc9YhZpxOn/M5MRW/Y/+AvUkx Ej8L8pls7xeS70WAW+LoDe/hkTL2CLtvT3e8AT0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy7HpcYuf6NbQNzXNo2ur EEnZTcqUKKn/XqWaDwt94DhMGdT+n5FNEzr9RHyW9VrX7lw+pcviqyr+A4KU2CeG wlzm+OBN1JBa0RUB9nwwxdio+hPp7DQvpwaQDIrEw1Dv2mkG3sdExkTqtfa7NCyw lGD796qnmKa/+Wy60MR/EOg7978hvfoPu/6ttF7dmfYLjFazZAlBNLOzYNA1Chpx juDdxfgVHsm0/o/3go08pftMaLTDaxyXbFyb9PJFa+lPCrMpBo7tfgdmN9h6/1xX Tfz/QHHZO9ciyQzRQL56BJxtmLy/KIvQsxQgWeKtyPlS/dx69urpMVvEZHx5z/37 ItpD7AcQS1jgI8Wiab5rAbSnNZEOO7KM0/HDpVBQJR2lU76ORCXo84e6ZHP15F0j S13qwK2QcHJDkFR4Ep8M52QSOGGAAETYsLa+fD60JZm/UzPuq/1dob1aZxZwnu6F hSoP4AdE7onV6WbL+eHcdkBrB3juQ3csSCcAS8hyq/TbpzEED2vyRpe9zRrvFhE2 IcmT0Tqv+BUU9R/YIhZXmRjKPvwVf2Via/pOj+r3TJNCit9412gVtZgd155wa6eG jDZ3ogFWizzF2bF2tvD1awkLSTqTUQX7q/OSC2kxh1Nke2bs8PnUFgeFyfsVaPA/ mUlqECVUDhtyUxz+xRqEIccCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290879808754622745334233344252439816715919 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-28 14:55:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-26 14:55:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'francecheval.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831002969174633325194533628365141803709810184111745571089453460294138015747874712368282818377146150153198185140173959842485744615933293658350683071673510793095488121182959958076469052829215039429390157488609577252220725501812412153284342793916754737787848526315740858845685927962462034091537496922194252201475203583427609495322354480507683202081336694420343916062266598397743524155693226079744961250304813336856297637507188477397389096062357582554963719700714950165594308831840368529809169169132837416744366954316342447880431324224746412693396998010617029959356157803956601310358169599964433600607868609717631746046287716943874772212660197649619443839439583852566862394394257970892337790643879831194646327211511857364510228502912069414417845410593177803898455008868583203737041948273297277902019651010772416760155907107562512980981662042502588305264619494591569848734157332600067753417425646502663958976233044692029723669326836404046515418565885765049959940963509856473832539733556337041030264655609132571392588513776256802763894886067214685023633419180239571481471426995044766835957370341510893918162671016561603353584462359260768623891404978474124154660465400608490292272255575730911848722524585514275738581041106105217246308868551 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cdab206bcb3f81bf850ca988f1314e59f78f8a3f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.francecheval.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francecheval.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.francecheval.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.francecheval.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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