l.laprovence.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number e4:5f:c9:32:4e:b0:e6:a7:12:a6:50:20:9b:2b:30:83 was issued on by Google Trust Services LLC.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=l.laprovence.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e4:5f:c9:32:4e:b0:e6:a7:12:a6:50:20:9b:2b:30:83
Serial Number (int): 303561331990613778282308760032865104003
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1d:3d:83:a1:39:58:89:2a:71:8b:5a:a1:6e:fc:d9:b5:0f:fc:0b:71
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 8d:76:b7:a2:c3:4c:83:5d:59:00:10:83:54:1a:10:a9:90:7a:ae:38
Fingerprint (sha256): 03:dd:f3:d6:d6:ce:6a:5f:16:b6:66:4e:7d:0d:1a:7d:7d:b8:59:f2:9d:60:58:24:af:f9:d2:26:1f:92:95:cc

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/y-P2-owCExQ
CRL Distribution Point: http://crls.pki.goog/gts1d4/7uxtbuQmu6E.crl

Check the revocation status for certificate l.laprovence.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for l.laprovence.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

l.laprovence.com
sur.laprovence.com
api.nonli.com
apiv2.nonli.com
nonli.com
sur.corsematin.com
go.3ds.com
go.solidworks.com
l.bfmtv.com
l.leparisien.fr
static.nonli.io
3ds.one

Other certificates including the domain name laprovence.com

(limited to 100 certificates)
meteo.laprovence.com
l.laprovence.com
l.laprovence.com
l.laprovence.com
l.laprovence.com
l.laprovence.com
dev-api-abonnement.laprovence.com
l.laprovence.com
l.laprovence.com
r.comm-interne.laprovence.com
must.laprovence.com
l.tierce-magazine.com
4811.laprovence.com
l.tierce-magazine.com
lafoiredemarseille.laprovence.com
www2.laprovence.com
salonautoprovence.laprovence.com
avocado.laprovence.com
mdedie027.fr
abonnement.laprovence.com
kiosque.laprovence.com
sni.cloudflaressl.com
www2.laprovence.com
staging-api-abonnement.laprovence.com
auth.laprovence.com
r.comm.laprovence.com
l.laprovence.com
l.laprovence.com
portail.laprovence-presse.fr
sni.cloudflaressl.com
auth.laprovence.com
abonnement.laprovence.com
l.laprovence.com
l.laprovence.com
www.laprovence.com
l.laprovence.com
*.laprovence.com
l.laprovence.com
l.laprovence.com
l.laprovence.com
r.comm.laprovence.com
l.tierce-magazine.com
l.laprovence.com
l.tierce-magazine.com
www.chassepechelangon.fr
a.laprovence.com
l.laprovence.com
www.mdedie027.fr
l.laprovence.com
www.repex.fr
kiosque.laprovence.com
l.laprovence.com
l.laprovence.com
salonautoprovence.laprovence.com
avocado.laprovence.com
avocado.laprovence.com
centreaffairescaravelle.fr
lafoiredemarseille.laprovence.com
l.laprovence.com
dev-auth.laprovence.com
l.tierce-magazine.com
must.laprovence.com
faq.laprovence.com
4811.laprovence.com
l.laprovence.com
t.communications.laprovence.com
sni.cloudflaressl.com
kiosque.laprovence.com
sni.cloudflaressl.com
l.laprovence.com
faq.laprovence.com
toutschussdays.laprovence.com
kiosque.laprovence.com
4811.laprovence.com
sni.cloudflaressl.com
l.tierce-magazine.com
faq.laprovence.com
non.li
*.laprovence.com
l.laprovence.com
*.laprovence.com
l.laprovence.com
l.laprovence.com
portail.laprovence-presse.fr
t.communications.laprovence.com
4811.laprovence.com
api-userr5.laprovence.com
bdc.laprovence.com
lafoiredemarseille.laprovence.com
l.laprovence.com
sni.cloudflaressl.com
l.laprovence.com
lafoiredemarseille.laprovence.com
l.laprovence.com
l.laprovence.com
dev-auth.laprovence.com
l.laprovence.com
staging-moncompte.laprovence.com
consent.laprovence.com
l.laprovence.com

Certificate

The complete raw certificate details for l.laprovence.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso62QdYvz4kpWBa/HWsv
vJ2V5e5SbjZ31y/l9NUcOmX34q9slpoYJ2QwwSa57AbB0l58gK4Vgjlqn/sv47ck
HTH152ynOYRx0oLouwgRP/smi+oI7aP4zA/0uePTSGLmn3fvASslxIuwL9pyhkSa
SiXkYNM9diUauAaZMi9Hkt2Sf3yXKj0DEV6Xb5ET/euYX1YbgpYhfc7MijF4sXKN
IqZqke4xwC7sm8Saf5Cbv+2LQriVt2whRC/K71qVguyclSzyEOknsbVckEI6herM
Ur3lw4ScSHKBge1KTz7LXvL/w+/yD2YzZdRj9pVdd+ZoFQyQ6tDLK5o5ZVPBau+6
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303561331990613778282308760032865104003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 13:12:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 14:05:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'l.laprovence.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22540792165472419397731488898737594283692184634234082689744619725957777474281858958570733969316072395695552196843404716173158458935153847287432574430920036723099778204622199428191661469774861810982324247823552212284665105339067006245865845968403837189205668496418257671370449076459007576046828534208152482234291003413366621448475764522360274543764884891115357374686421791527221600060014724637928463094656578752214704317805368542289647390261558915321477038555016697121262364812457385688881213802734779796896270986084037450276200279299425886783089623074492374247296306193569657087912559685646287702892791687892152859299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d3d83a13958892a718b5aa16efcd9b50ffc0b71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/y-P2-owCExQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.laprovence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sur.laprovence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nonli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiv2.nonli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sur.corsematin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.3ds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.solidworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.bfmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.leparisien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.nonli.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3ds.one'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/7uxtbuQmu6E.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aeb94fcfe00000403004730450220610682259be8aba61ef1a2543d3450c9194c6e857e4df1f77b8145d6bb1dfab3022100a76e3f6beb04e58c5e32be8bc2ffd9dd3af0dfae71431007257df02617636ff4007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aeb94fcdd0000040300483046022100d2be1d28a16dbd39992c8b85a1563bd27d23bbbcb74fc115df1717bc66b45a0b022100cec28ce284f014a8ac6ba31280781eda5fb86267e0dfa7683fa5c399d7a17572
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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