kwsjy9.oui.sncf

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:6a:7b:1c:27:77:3e:b8:f6:20:f4:ff:2a:1c:58:e2:db was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kwsjy9.oui.sncf

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:6a:7b:1c:27:77:3e:b8:f6:20:f4:ff:2a:1c:58:e2:db
Serial Number (int): 268284042524800581858793647356137021432539
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 10:37:c6:50:31:e4:14:e9:39:08:9a:6c:9f:fd:52:03:c6:b2:10:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:7e:74:b6:1e:ca:ff:b6:8b:ce:6d:0a:07:0e:dc:7c:3c:a6:38:a3
Fingerprint (sha256): 04:6e:a9:e6:a2:6d:b8:0a:09:d0:96:60:95:49:13:9c:c6:60:16:c6:e4:18:cf:1d:b7:dc:df:22:d8:35:13:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kwsjy9.oui.sncf

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kwsjy9.oui.sncf

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kwsjy9.oui.sncf

Other certificates including the domain name oui.sncf

(limited to 100 certificates)
hiflow.oui.sncf
kwsjy9.oui.sncf
ch.jeu.oui.sncf
allianz-travel.oui.sncf
forms.oui.sncf
mesbagages.oui.sncf
globe-ext2-cnit-gw.oui.sncf
hiflow.oui.sncf
da.oui.sncf
fr.jeu.oui.sncf
kwsjy9.oui.sncf
r1ztni.oui.sncf
zum7cc.oui.sncf
ch.hotel.oui.sncf
sstats.oui.sncf
it.hotel.oui.sncf
forms.oui.sncf
v.oui.sncf
v.oui.sncf
eu.jeu.oui.sncf
kwsjy9.oui.sncf
ch.jeu.oui.sncf
globe-ext2-cnit-gw.oui.sncf
mirror.avis.co.uk
sstats.oui.sncf
autotrain.oui.sncf
mirror.avis.co.uk
hotel.oui.sncf
lu.hotel.oui.sncf
autotrain.oui.sncf
*.fret.sncf.com
forms.oui.sncf
zum7cc.oui.sncf
partenariat.oui.sncf
inv3te.oui.sncf
presse.ouitalk.oui.sncf
*.oui.sncf
v.oui.sncf
abonnement.voyages-sncf.com
ao.oui.sncf
oui.sncf
v.oui.sncf
forms.oui.sncf
eu.jeu.oui.sncf
mirror.avis.co.uk
agence.voyages-sncf.com
zum7cc.oui.sncf
bagages.oui.sncf
es.jeu.oui.sncf
v.oui.sncf
be.hotel.oui.sncf
jobs.oui.sncf
nl.hotel.oui.sncf
tgvpop.oui.sncf
it.hotel.oui.sncf
ao.oui.sncf
mesbagages.oui.sncf
partenariat.oui.sncf
presse.ouitalk.oui.sncf
hiflow.oui.sncf
es.jeu.oui.sncf
ouitalk.oui.sncf
zum7cc.oui.sncf
autotrain.oui.sncf
secure.analytics.voyages-sncf.com
inv3te.oui.sncf
fl5dpe.oui.sncf
monchauffeur.oui.sncf
presse.ouitalk.oui.sncf
oui.sncf
oui.sncf
kwsjy9.oui.sncf
partenariat.oui.sncf
partenariat.oui.sncf
*.avis.fr
fl5dpe.oui.sncf
restaurationabord.oui.sncf
presse.ouitalk.oui.sncf
ch.jeu.oui.sncf
ch.jeu.oui.sncf
bagages.oui.sncf
kwsjy9.oui.sncf
presse.vous.sncf-connect.com
secure.analytics.voyages-sncf.com
r1ztni.oui.sncf
interrail.oui.sncf
lebartgv.oui.sncf
mesbagages.oui.sncf
v.oui.sncf
hiflow.oui.sncf
ch.jeu.oui.sncf
hiflow.oui.sncf
eu.jeu.oui.sncf
oui.sncf
*.fret.sncf.com
globe-cnit-gw.oui.sncf
presse.ouitalk.oui.sncf
mta.evtech.oui.sncf
oui.sncf
it.hotel.oui.sncf

Certificate

The complete raw certificate details for kwsjy9.oui.sncf in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268284042524800581858793647356137021432539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 23:51:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-22 23:51:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kwsjy9.oui.sncf'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 866005514520201093419015587610154485083049106738304165462682015889942820431869780298083718465659076400476634846410173241918832623578897883392735463322292068944854098856478770658504809834330625530407656270408841817751870021278111946162679347816812726181474935194643679813502722373161505723711608700186813423269789270310514097529055392577752641646967506577956720961256853506666538563854646554589923322007694257063023834805277641738176897853412134205670793859438448594445236812370626905718001819097168710823123820239146792237005579006715730280522205118388120607072852002602183701658338334192594531377024033387945089682105488811677445112882795116740621573690454329758764518795344941835509054789846854042979722654396537000350011849948177500838841317917615157988429094926222901643049320436277060105363143378708624250124738423185674060828017629426440749382132077520717050977721958908331174524595437813941273322493296851405575310830633820637441189416979212381594264391443621351802966086118943592038857378814948082206152236424405503738488776384604835892028672255045603475732736864534338777059292459366300158753885553278181725544229385902010404566269028671928300362406396852613295987024982229098324040209586898696375454112334062207763369091311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1037c65031e414e939089a6c9ffd5203c6b2106e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwsjy9.oui.sncf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001710f2c7a770000040300473045022100b3422d8266c87b02de81a1b9ff4a9ff7157e65a1f39f286d154995d8059ba03c022036545603eb34400b28af3501b56efa89998139cbd21be63de16721e7eb17e15a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001710f2c7ba300000403004730450221008002b0bad05e9517de053ebd8894f15df35955ae26794dc743e1efcdaccb581e022076d4bfe664671a33e887fd4676b1b9b7bbf1aecca9a225758433b145fc5f6c86
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00465664d9d3a166b2a1483854ea4d6b2610965dd24aae178744fb8abdabf44890370c33b7597acac8d93087ce3c235a3da56a7f397b1494bcdbeecc6e554f43fbefa915d5c710860867e11d8ecaaf48417b929c8548afd2d108c11a0a6260c29638755c0d1be035b370493fe589f98d2cea7f2b7c7b3302a0bbceb237b24ec44ee325d8f7869505f5002db111482e29743e1937502a3128b4b54d1890af687447831e2e0f87730b5e3551aae7451333908ab2447fda146e05f941080e98ee162b673f6f0e5047757b30f6e945c4801be3795058851004afe937bb7e364003943792b3559856de0431cc3f4f8297b0c3d06d83addbaf99ae1230f2c410cdabb084