l.laprovence.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e8:63:98:ec:80:1d:38:90:f2:3d:9d:d2:db:66:72:4e:30 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=l.laprovence.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:63:98:ec:80:1d:38:90:f2:3d:9d:d2:db:66:72:4e:30
Serial Number (int): 427527040450202828788455618694176438373936
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:75:dc:cf:03:2a:d0:4b:ea:92:4c:ee:85:f3:5d:e3:66:3a:1c:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:31:e2:77:80:40:cf:7c:8f:8c:93:32:f5:44:3b:54:51:59:42:ad
Fingerprint (sha256): 04:af:02:9d:61:ab:5c:0e:a6:27:da:50:4c:4d:a5:03:0b:d5:b5:30:96:37:55:4b:b9:07:0d:99:a6:e1:cd:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate l.laprovence.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for l.laprovence.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3ds.one
akius.fans
akius.live
api.nonli.com
apiv2.nonli.com
gamesforhumans.co
go.3ds.com
go.solidworks.com
l.bfmtv.com
l.laprovence.com
l.leparisien.fr
lobs.li
minute-foot.fr
nonli.com
nonli.fr
poc.warnerbros.fr
static.nonli.io
sur.corsematin.com
sur.laprovence.com
wowclassicsource.com

Other certificates including the domain name laprovence.com

(limited to 100 certificates)
meteo.laprovence.com
l.laprovence.com
l.laprovence.com
l.laprovence.com
l.laprovence.com
l.laprovence.com
dev-api-abonnement.laprovence.com
l.laprovence.com
l.laprovence.com
r.comm-interne.laprovence.com
must.laprovence.com
l.tierce-magazine.com
4811.laprovence.com
l.tierce-magazine.com
lafoiredemarseille.laprovence.com
www2.laprovence.com
salonautoprovence.laprovence.com
avocado.laprovence.com
mdedie027.fr
abonnement.laprovence.com
kiosque.laprovence.com
sni.cloudflaressl.com
www2.laprovence.com
staging-api-abonnement.laprovence.com
auth.laprovence.com
r.comm.laprovence.com
l.laprovence.com
l.laprovence.com
portail.laprovence-presse.fr
sni.cloudflaressl.com
auth.laprovence.com
abonnement.laprovence.com
l.laprovence.com
l.laprovence.com
www.laprovence.com
l.laprovence.com
*.laprovence.com
l.laprovence.com
l.laprovence.com
l.laprovence.com
r.comm.laprovence.com
l.tierce-magazine.com
l.laprovence.com
l.tierce-magazine.com
www.chassepechelangon.fr
a.laprovence.com
l.laprovence.com
www.mdedie027.fr
l.laprovence.com
www.repex.fr
kiosque.laprovence.com
l.laprovence.com
l.laprovence.com
salonautoprovence.laprovence.com
avocado.laprovence.com
avocado.laprovence.com
centreaffairescaravelle.fr
lafoiredemarseille.laprovence.com
l.laprovence.com
dev-auth.laprovence.com
l.tierce-magazine.com
must.laprovence.com
faq.laprovence.com
4811.laprovence.com
l.laprovence.com
t.communications.laprovence.com
sni.cloudflaressl.com
kiosque.laprovence.com
sni.cloudflaressl.com
l.laprovence.com
faq.laprovence.com
toutschussdays.laprovence.com
kiosque.laprovence.com
4811.laprovence.com
sni.cloudflaressl.com
l.tierce-magazine.com
faq.laprovence.com
non.li
*.laprovence.com
l.laprovence.com
*.laprovence.com
l.laprovence.com
l.laprovence.com
portail.laprovence-presse.fr
t.communications.laprovence.com
4811.laprovence.com
api-userr5.laprovence.com
bdc.laprovence.com
lafoiredemarseille.laprovence.com
l.laprovence.com
sni.cloudflaressl.com
l.laprovence.com
lafoiredemarseille.laprovence.com
l.laprovence.com
l.laprovence.com
dev-auth.laprovence.com
l.laprovence.com
staging-moncompte.laprovence.com
consent.laprovence.com
l.laprovence.com

Certificate

The complete raw certificate details for l.laprovence.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuVu01UBeQK/fIkb22PV
DjRKitXes1uk1eVCfAqBKrMARZJbkrtwarB9uTeEIHHKyvREdKnQ5TtbuL85yrKv
/50Bja+wffGBmBTyOnMQBQxCgC6gHU1mzzVrLqAXn/DmP5+X+de4/uhL0s0iim2G
DfOKVp7rMqFmcCKuXiU/x6JjDRNtSCUwrfk0Zlf4AbP0pMaHL2e4IyCCp3qSUwnS
QONtmzloawULIyKTgiQykSqHQQOMJqZf3RFpEbaDOZ6OySJKk8qtCQAAE4JQlA+f
i6kMz+cxKqsjutoiwF0icNEH1Oi6nqP/M0h6jZlNr+8JNwBeCvz/2zBcnHX51snn
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427527040450202828788455618694176438373936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-21 20:16:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-22 20:16:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'l.laprovence.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22583555869645632658379892238298362274186441344825934639372503108328109974081653354372428091253907246323798779561907447851624147541709245705323092044667281946621049248850338755989777936855854561947372154417316567291438218748941678112417782304199382180413239840909687120387623708996783568414734284788553059913328983853797662671534722692629150308627429592785493034925516603083433275948847536688663143297528173533944409393601660666987176991096540442710973018560810803683603408538190856941655534941994441972039338792781621652617067945022311109398536264356606510063004296628392985889550550653351931561677741842348332672933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f275dccf032ad04bea924cee85f35de3663a1c12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3ds.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akius.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akius.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nonli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiv2.nonli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamesforhumans.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.3ds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.solidworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.bfmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.laprovence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.leparisien.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobs.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minute-foot.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonli.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poc.warnerbros.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.nonli.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sur.corsematin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sur.laprovence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowclassicsource.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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