coursenligne.parisnanterre.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:33:9c:b9:86:50:9c:66:8a:29:3b:03:d3:0e:54:80:0d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=coursenligne.parisnanterre.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:33:9c:b9:86:50:9c:66:8a:29:3b:03:d3:0e:54:80:0d
Serial Number (int): 298496240178645292929921695698047915556877
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:43:f9:56:c5:53:be:64:56:00:23:4d:72:79:12:c4:60:3b:65:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:90:64:57:55:b1:af:a8:d4:42:d5:14:9d:bf:98:46:92:34:07:6d
Fingerprint (sha256): 03:43:90:64:88:a3:6a:f0:61:4d:e3:52:14:f3:a8:95:54:d1:f7:64:3d:53:0e:cd:af:25:d1:7c:ec:ae:08:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate coursenligne.parisnanterre.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coursenligne.parisnanterre.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coursenligne.parisnanterre.fr

Other certificates including the domain name parisnanterre.fr

(limited to 100 certificates)
gestiondmzhttp.parisnanterre.fr
tpl.parisnanterre.fr
sas.parisnanterre.fr
webtv.parisnanterre.fr
*.parisnanterre.fr
coursenligne.parisnanterre.fr
coursenligne.parisnanterre.fr
ead.parisnanterre.fr
helios.parisnanterre.fr
hal.parisnanterre.fr
formation.parisnanterre.fr
coursenligne2018.parisnanterre.fr
50ansnumerique.parisnanterre.fr
tpl.parisnanterre.fr
comete-red.parisnanterre.fr
examens-phillia.parisnanterre.fr
examensenligne.parisnanterre.fr
ha1.parisnanterre.fr
ent.parisnanterre.fr
comete-stats.parisnanterre.fr
alba.parisnanterre.fr
viatori.parisnanterre.fr
hemera.admc.parisnanterre.fr
consultation.parisnanterre.fr
ead2016.parisnanterre.fr
examensenligne.parisnanterre.fr
*.longaway.parisnanterre.fr
comete-stats.parisnanterre.fr
projets.parisnanterre.fr
sas.parisnanterre.fr
ead.parisnanterre.fr
ead.parisnanterre.fr
coursenligne.parisnanterre.fr
baras.parisnanterre.fr
hector.admc.parisnanterre.fr
obm-bkd.parisnanterre.fr
ead.parisnanterre.fr
dante.parisnanterre.fr
webtv.parisnanterre.fr
coursenligne2016.parisnanterre.fr
coursenligne.parisnanterre.fr
comete-gestion.parisnanterre.fr
adum.parisnanterre.fr
primo.parisnanterre.fr
coursenligne.parisnanterre.fr
gestiondmzhttp.parisnanterre.fr
webtv.parisnanterre.fr
examensenligne.parisnanterre.fr
ead.parisnanterre.fr
ecandidataspp.parisnanterre.fr
cousinade.grimbert.com
janus.parisnanterre.fr
ha2.parisnanterre.fr
recharger.parisnanterre.fr
tpl.parisnanterre.fr
upnidp2.parisnanterre.fr
fichiers.parisnanterre.fr
projets.parisnanterre.fr
bdr.parisnanterre.fr
blogs.parisnanterre.fr
ssl471393.cloudflaressl.com
amphion.admc.parisnanterre.fr
argonnaute.parisnanterre.fr
gluttony2-rec.admc.parisnanterre.fr
eportfolio.parisnanterre.fr
horus.parisnanterre.fr
jason.parisnanterre.fr
coursenligne.parisnanterre.fr
viatori.parisnanterre.fr
upnidp2.parisnanterre.fr
hemera73.parisnanterre.fr
coursenligne2018.parisnanterre.fr
volnay.cva.parisnanterre.fr
imprimer.parisnanterre.fr
webtv.parisnanterre.fr
*.parisnanterre.fr
bene.parisnanterre.fr
primo-stag.parisnanterre.fr
examens-spse.parisnanterre.fr
longaway.parisnanterre.fr
tpl.parisnanterre.fr
coursenligne2016.parisnanterre.fr
50ansnumerique.parisnanterre.fr
ead2016.parisnanterre.fr
santenay.cva.parisnanterre.fr
spwifi.parisnanterre.fr
comete-stats.parisnanterre.fr
coursenligne2018.parisnanterre.fr
arnaudnew.parisnanterre.fr
bdr.parisnanterre.fr
comete-gestion.parisnanterre.fr
coursenligne2016.parisnanterre.fr
*.faraway.parisnanterre.fr
ladro.admc.parisnanterre.fr
*.faraway.parisnanterre.fr
gestiondmzhttp.parisnanterre.fr
coursenligne.parisnanterre.fr
janus.parisnanterre.fr
oseprod.admc.parisnanterre.fr
*.saisine.parisnanterre.fr

Certificate

The complete raw certificate details for coursenligne.parisnanterre.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298496240178645292929921695698047915556877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 22:30:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 22:30:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coursenligne.parisnanterre.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 954018257954271689838784453037598782132871982338581899769346808823764515921172085505417413996079091765139358803245976066753163376906835723416578969336112272042234981621713872526684776766735370205262296947339936950453222601587926942206980395529686919969154303527927945119217251446075921238657174081251740661097486904738282984770621573238663102350352809784852979099022041062429103354916757797620025603479628122216818418827744952747225536748234144752762433562315143259076853058163761130478546540941196471715990296801603933727056181622628323990515180175689052380998635851141006648391205117896700362815787822327385102186220636591629962234121745038723053959254168652477212730257732218274901461113934349760438911160306866865568336956086575062102344595290505712385394359977707265023409976035282562339359147023187867852713043008470641456212958894532691569669078010109451100473502380454395548854930155705298824160440977941101992574453486524858715903800813501036372224644913393867759237471311852797224926707626240230593378883352948957766038038282879385142826055782658567521002124942273235776318592574421400051386201746613445542521902499162292832752940422960423418111680249892925050893757402738591894149980219733871306435106003122895062201958481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a643f956c553be645600234d727912c4603b6543
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursenligne.parisnanterre.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017017b0b05e0000040300463044022008ac2c0de671453a24168dd867e05a51a4f95df48fee6f47cc9b22a1822dfb6d02206473fb116629d35735a6511355e2a51e3da7f709b82bf008c8c2b39ca9cd6dd1007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017017b0b04c0000040300463044022074a30083d20f3c74cf521c1b4a530ddcfdbb4e4f2ab5d2d4a1d3b53697c797c302202f87e4e7e10bc159ea35fc2f7b4a87febffc7d2efa86b3c5297ab32a7eb42a9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048992d20e9fac416adf4ceb01c8fea2711b941dc38d241b8f745f4d38a3ec160bd1e74b3e424ab7a2130017c263ea148bcc3796783b9c25a5e7933366e5f7a54a0375c496ca8ef8375dd2d4ca6b4ee717ea8ff3be91421669f5505c6aeef23081fe288e822ececebe4b4eedbb57506136a2b8445eb09b12a95651d90884b1986e38916ea8b421e2ba4b56b36848ae961483a565a6970f02abfb05c35fcd50367d657bf6cdc6919110a86f914b1104a179dc0ef3c5be019da8e6709b80c14abe3326ed5e6431f47974509d5b33189bacc4556327a2b6338a0930356cc734c2b36e35bab006779178bedf3268b8dbc21c74b383610107b5b401e8cec20c96692b8