qlf-gpp3-www-geoportail-wp-fr.aw.atos.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:69:34:3e:49:13:6b:fc:62:92:37:e7:a5:5c:77:4d:e4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qlf-gpp3-www-geoportail-wp-fr.aw.atos.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:69:34:3e:49:13:6b:fc:62:92:37:e7:a5:5c:77:4d:e4
Serial Number (int): 293803522855063015998632707538365068037604
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:77:e7:27:78:78:8f:a6:8c:21:b9:eb:8c:93:40:20:72:aa:ff:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:12:01:16:cf:a2:3d:f7:db:48:ff:e8:16:36:97:8b:57:36:c6:56
Fingerprint (sha256): 02:d8:94:ee:7d:47:01:29:73:04:1b:27:fe:07:98:7e:77:c0:d2:2d:0f:92:1d:3f:ac:5c:f0:65:13:2e:15:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate qlf-gpp3-www-geoportail-wp-fr.aw.atos.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qlf-gpp3-www-geoportail-wp-fr.aw.atos.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qlf-gpp3-www-geoportail-wp-fr.aw.atos.net

Other certificates including the domain name atos.net

(limited to 100 certificates)
*.it.atos.net
liv1-portail.pmu.aw.atos.net
nc1.saas.cloud.atos.net
liv.prg-396-ws-scv-client.aw.atos.net
saml.top.br.atos.net
ctms.it-solutions.atos.net
digitalevents.atos.net
stg-ssl-belux-lsf-renault-admin.aw.atos.net
uc-emea2.myatos.net
ura-eu.it-solutions.atos.net
edf-smartpush.aw.atos.net
rci-lux-ws.aw.atos.net
bpa-eu.atos.net
ssl-prd-bo-bnpp.ewallet.aw.atos.net
inss-mdm.ascs.uk.atos.net
wl-amr-client-acceptance-00020.aw.atos.net
hrit.atos.net
management.onprem.mdsp-infra.siemensmac.sg.mdsp.atos.net
stg-api-mcdofidelite.mcdo.aw.atos.net
globalsurveys-to.aw.atos.net
*.adminhosting.onprem.mdsp-infra.acc.mspas.atos.net
*.mev.atos.net
e-web.it-solutions.atos.net
bxn.click2procure.atos.net
qlf3-ws-mcdonalds-fr.aw.atos.net
cert00003-azurecdn.akamaized.net
VEES-EMSD-GOV.hk.atos.net
ssl-prd-fo-m2m-oob-saas.sea.aw.atos.net
wes-eviewing.aw.atos.net
events.nl.atos.net
enroll.pki.atos.net
rmttest.cloud.atos.net
awx.develop.dev-bm4gcp.agea.atos.net
ic.es.atos.net
aea.atos.net
enc-prd-paylib-p2p.ewallet.aw.atos.net
echangeqa-na.it-solutions.atos.net
Paylib-PROD-Signing-54251007.ewallet.aw.atos.net
hochtief.it-solutions.atos.net
www.sharepoint.atos.net
mantiscalipso.si.fr.atos.net
amobt-na.it-solutions.atos.net
uniqueid.pre.uid2020.mev.atos.net
portailmen.bs.fr.atos.net
tls-ecc-root-2021-pki-valid.atos.net
portail.pmu.aw.atos.net
apfws.atos.net
public.dev-mbnsei.aw.atos.net
nexus3.ic.es.atos.net
test.atos.net
*.adminhosting.onprem.mdsp-infra.siemensmac.sg.mdsp.atos.net
tls-ecc-root-2021-pki-valid.atos.net
zsa.egk-tsp.de.atos.net
lab.it-solutions.atos.net
nokia-epm.it-solutions.atos.net
smc-collaboration.atos.net
apps.fi.atos.net
ctms2.it-solutions.atos.net
mta.cpp.a3c.atos.net
xauth-fidm.access.it-solutions.atos.net
sap-web-totalsva-stg.aw.atos.net
ws-tnr-wiremock-stub-server.factory.fr.atos.net
sepaplug-sepamail-ced.aw.atos.net
ura-aa.it-solutions.atos.net
*.servicetrace.it-solutions.atos.net
ssl-tec-client-web-bo-m2m-wallmngt.germany.ewallet.aw.atos.net
qlf-gpp3-www-geoportail-wp-fr.aw.atos.net
mdr-poc.aisaac.atos.net
generic-portal.it-solutions.atos.net
gateway2.es.atos.net
ucloud.atos.net
qlfv2-www.auchandrive-fr.aw.atos.net
letsencrypt.qlf-dpsk.aw.atos.net
serv-handyline.it-solutions.atos.net
*.sdc.atos.net
dataviz.aw.atos.net
atf-srp.it-solutions.atos.net
SIRON-AML.SI.FR.ATOS.NET
mp.it-solutions.atos.net
ssl-prd-fo-mob-oob-saas.sea.aw.atos.net
smartpush-ihm.aw.atos.net
qlf-gpp3-www-geoportail-wp-fr.aw.atos.net
selfhelp-uat.ms.atos.net
bea.it-solutions.atos.net
cert00003-azurecdn.akamaized.net
www.e-travel-counter.it-solutions.atos.net
portal.onprem.mdsp-infra.siemensmac.sg.mdsp.atos.net
www.enduzd.com
liv-txm-h2h.cwi.aw.atos.net
gpp3-edito-geoportail-wp-fr.aw.atos.net
qlfv4-www.auchandrive-fr.aw.atos.net
cert00003-azurecdn.akamaized.net
gitlab.auregis.it-solutions.atos.net
qlf-lsm-mcdonalds-fr.aw.atos.net
netviewervs2.it-solutions.atos.net
cpo-lb.it-solutions.atos.net
obelix.atos.net
qlf3-www-mcdonalds-fr.aw.atos.net
skillbuilder.dcsdev.aws.atos.net
ref-fidm9.access.it-solutions.atos.net

Certificate

The complete raw certificate details for qlf-gpp3-www-geoportail-wp-fr.aw.atos.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293803522855063015998632707538365068037604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-20 12:06:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-18 12:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qlf-gpp3-www-geoportail-wp-fr.aw.atos.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788946017374321857293358835484858417548336325753864179297964602899231944396057736822059293219519470405222223568631553459449178663144879874964963703947592632573785774188427420368065401559868955625794548619337809633747400249353429322442875055513100647614528129384186028709950917686323649161105606563144284899978348041368149534547134738141413483384583634170886773174729488192615932203239789247630848195058680929243860715887212735130483841259206062051780971998858864422620820808342960030190475995131728093526788531387003350508086018048508315875409967243384766646004700879934723472341106597893850764802137875637472462077604485057326746396660040507275689798897936568984666460927355320409888983756275798029572424519768924798220303950871462461463902046425468598195669305811286078678990954372782045703412747505533452173816848003430993656273305431647167483466030089884010644254547836813755782735809972913871798000616921283731669239437639703463907558751889204077558963566265060238274614938219697290003038994496631324106979428606506004473115341332695393880736263409063048952292717148459888287231875114537397660959193476132002955756633734036892842896437481198517328028047372546561642900589421468028706513048646106876256084787836326951246300730213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c577e72778788fa68c21b9eb8c93402072aaffef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qlf-gpp3-www-geoportail-wp-fr.aw.atos.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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