coursenligne.parisnanterre.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f2:ba:81:26:4a:93:67:a9:fd:bd:64:1d:d3:97:77:ed:53 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=coursenligne.parisnanterre.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f2:ba:81:26:4a:93:67:a9:fd:bd:64:1d:d3:97:77:ed:53
Serial Number (int): 431045383512058908673139245600866521574739
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6b:c6:56:82:18:f1:6e:0a:da:50:33:c7:19:81:ef:9a:34:d6:75:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:27:8c:34:7d:4b:16:71:54:48:23:84:9a:bc:4f:f5:38:09:07:7d
Fingerprint (sha256): 02:d5:2f:18:5c:72:05:45:cf:f1:f2:58:75:3b:20:89:4e:ab:1f:b5:b3:80:7c:ca:37:a8:ef:3f:2e:96:65:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate coursenligne.parisnanterre.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coursenligne.parisnanterre.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coursenligne.parisnanterre.fr
coursenligne.u-paris10.fr

Other certificates including the domain name parisnanterre.fr

(limited to 100 certificates)
gestiondmzhttp.parisnanterre.fr
tpl.parisnanterre.fr
sas.parisnanterre.fr
webtv.parisnanterre.fr
*.parisnanterre.fr
coursenligne.parisnanterre.fr
coursenligne.parisnanterre.fr
ead.parisnanterre.fr
helios.parisnanterre.fr
hal.parisnanterre.fr
formation.parisnanterre.fr
coursenligne2018.parisnanterre.fr
50ansnumerique.parisnanterre.fr
tpl.parisnanterre.fr
comete-red.parisnanterre.fr
examens-phillia.parisnanterre.fr
examensenligne.parisnanterre.fr
ha1.parisnanterre.fr
ent.parisnanterre.fr
comete-stats.parisnanterre.fr
alba.parisnanterre.fr
viatori.parisnanterre.fr
hemera.admc.parisnanterre.fr
consultation.parisnanterre.fr
ead2016.parisnanterre.fr
examensenligne.parisnanterre.fr
comete-stats.parisnanterre.fr
projets.parisnanterre.fr
sas.parisnanterre.fr
ead.parisnanterre.fr
ead.parisnanterre.fr
coursenligne.parisnanterre.fr
baras.parisnanterre.fr
hector.admc.parisnanterre.fr
obm-bkd.parisnanterre.fr
ead.parisnanterre.fr
dante.parisnanterre.fr
webtv.parisnanterre.fr
coursenligne2016.parisnanterre.fr
coursenligne.parisnanterre.fr
comete-gestion.parisnanterre.fr
adum.parisnanterre.fr
coursenligne.parisnanterre.fr
gestiondmzhttp.parisnanterre.fr
webtv.parisnanterre.fr
examensenligne.parisnanterre.fr
ead.parisnanterre.fr
ecandidataspp.parisnanterre.fr
cousinade.grimbert.com
ha2.parisnanterre.fr
recharger.parisnanterre.fr
tpl.parisnanterre.fr
upnidp2.parisnanterre.fr
fichiers.parisnanterre.fr
projets.parisnanterre.fr
blogs.parisnanterre.fr
ssl471393.cloudflaressl.com
amphion.admc.parisnanterre.fr
gluttony2-rec.admc.parisnanterre.fr
eportfolio.parisnanterre.fr
horus.parisnanterre.fr
jason.parisnanterre.fr
coursenligne.parisnanterre.fr
viatori.parisnanterre.fr
upnidp2.parisnanterre.fr
hemera73.parisnanterre.fr
coursenligne2018.parisnanterre.fr
volnay.cva.parisnanterre.fr
imprimer.parisnanterre.fr
webtv.parisnanterre.fr
*.parisnanterre.fr
bene.parisnanterre.fr
primo-stag.parisnanterre.fr
examens-spse.parisnanterre.fr
longaway.parisnanterre.fr
tpl.parisnanterre.fr
coursenligne2016.parisnanterre.fr
50ansnumerique.parisnanterre.fr
ead2016.parisnanterre.fr
santenay.cva.parisnanterre.fr
spwifi.parisnanterre.fr
comete-stats.parisnanterre.fr
coursenligne2018.parisnanterre.fr
arnaudnew.parisnanterre.fr
bdr.parisnanterre.fr
comete-gestion.parisnanterre.fr
coursenligne2016.parisnanterre.fr
*.faraway.parisnanterre.fr
ladro.admc.parisnanterre.fr
*.faraway.parisnanterre.fr
gestiondmzhttp.parisnanterre.fr
coursenligne.parisnanterre.fr
oseprod.admc.parisnanterre.fr
*.saisine.parisnanterre.fr
upnidp1.parisnanterre.fr
blogs.parisnanterre.fr
comete.parisnanterre.fr
bdr.parisnanterre.fr
gestiondmzhttppp.parisnanterre.fr
obm3-ui.parisnanterre.fr

Certificate

The complete raw certificate details for coursenligne.parisnanterre.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431045383512058908673139245600866521574739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-21 12:06:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-19 12:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coursenligne.parisnanterre.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627796691416941284854802040144177482376189164646007873079345794468718672439353676349206978787838675843881460962886272324908854353408741576572934099499050651767081906858512659803015714459165804265948057862952714634151394204888969246555506065572209971340034664321686599437940899289432690410795358190705423299234511727183785764866078352399968907390681243280606298243004306933947465162225879576245774559789924521797688688716289578102005335933908978866762314946519007549205199386826962924719116410425582342710493272313633073122076619943780803268229863846182423435606576789702188877683490180680266260659426277661995670684395540030971473409261911958433027536084887769184669764232000390733103264121786221338988100776927252980457475575432666987859617626080980870442413659995104543595424006533405616659587048966633277051556198507090857677336850336543547515510866387696063219545887181668491075656438269534624069543320250209165720165129656628996971033789631349759976883565393784892839946090827549070969452935669213898366813912047563460078108081595379896639178192453874052149196895786170121782084090313274742911569405386542323025368357056429967435667248713236756684660863057707352096618892123246079282789288317227431153342307471040125741581597193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bc6568218f16e0ada5033c71981ef9a34d675fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursenligne.parisnanterre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursenligne.u-paris10.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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