coursenligne2018.parisnanterre.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:4b:c8:42:ae:fe:b2:6b:67:e1:ef:7c:bf:73:77:84:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=coursenligne2018.parisnanterre.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:4b:c8:42:ae:fe:b2:6b:67:e1:ef:7c:bf:73:77:84:3d
Serial Number (int): 262118154440681751529784203799476624131133
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:33:69:6b:d7:af:07:ca:67:c9:31:40:94:dd:d2:5f:db:18:3b:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:a7:86:3f:96:5f:01:53:ff:f7:9a:d7:44:b7:b5:d9:64:77:64:02
Fingerprint (sha256): 04:f0:e6:62:2a:dd:d8:67:f4:74:63:4e:16:f3:8f:3f:f9:4e:8d:61:b4:16:18:d7:af:f7:b5:93:bf:94:6d:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate coursenligne2018.parisnanterre.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coursenligne2018.parisnanterre.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coursenligne2018.parisnanterre.fr

Other certificates including the domain name parisnanterre.fr

(limited to 100 certificates)
gestiondmzhttp.parisnanterre.fr
tpl.parisnanterre.fr
sas.parisnanterre.fr
webtv.parisnanterre.fr
*.parisnanterre.fr
coursenligne.parisnanterre.fr
coursenligne.parisnanterre.fr
ead.parisnanterre.fr
helios.parisnanterre.fr
hal.parisnanterre.fr
formation.parisnanterre.fr
coursenligne2018.parisnanterre.fr
50ansnumerique.parisnanterre.fr
tpl.parisnanterre.fr
comete-red.parisnanterre.fr
examens-phillia.parisnanterre.fr
examensenligne.parisnanterre.fr
ha1.parisnanterre.fr
ent.parisnanterre.fr
comete-stats.parisnanterre.fr
alba.parisnanterre.fr
viatori.parisnanterre.fr
hemera.admc.parisnanterre.fr
consultation.parisnanterre.fr
ead2016.parisnanterre.fr
examensenligne.parisnanterre.fr
comete-stats.parisnanterre.fr
projets.parisnanterre.fr
sas.parisnanterre.fr
ead.parisnanterre.fr
ead.parisnanterre.fr
coursenligne.parisnanterre.fr
baras.parisnanterre.fr
hector.admc.parisnanterre.fr
obm-bkd.parisnanterre.fr
ead.parisnanterre.fr
dante.parisnanterre.fr
webtv.parisnanterre.fr
coursenligne2016.parisnanterre.fr
coursenligne.parisnanterre.fr
comete-gestion.parisnanterre.fr
adum.parisnanterre.fr
coursenligne.parisnanterre.fr
gestiondmzhttp.parisnanterre.fr
webtv.parisnanterre.fr
examensenligne.parisnanterre.fr
ead.parisnanterre.fr
ecandidataspp.parisnanterre.fr
cousinade.grimbert.com
ha2.parisnanterre.fr
recharger.parisnanterre.fr
tpl.parisnanterre.fr
upnidp2.parisnanterre.fr
fichiers.parisnanterre.fr
projets.parisnanterre.fr
blogs.parisnanterre.fr
ssl471393.cloudflaressl.com
amphion.admc.parisnanterre.fr
gluttony2-rec.admc.parisnanterre.fr
eportfolio.parisnanterre.fr
horus.parisnanterre.fr
jason.parisnanterre.fr
coursenligne.parisnanterre.fr
viatori.parisnanterre.fr
upnidp2.parisnanterre.fr
hemera73.parisnanterre.fr
coursenligne2018.parisnanterre.fr
volnay.cva.parisnanterre.fr
imprimer.parisnanterre.fr
webtv.parisnanterre.fr
*.parisnanterre.fr
bene.parisnanterre.fr
primo-stag.parisnanterre.fr
examens-spse.parisnanterre.fr
longaway.parisnanterre.fr
tpl.parisnanterre.fr
coursenligne2016.parisnanterre.fr
50ansnumerique.parisnanterre.fr
ead2016.parisnanterre.fr
santenay.cva.parisnanterre.fr
spwifi.parisnanterre.fr
comete-stats.parisnanterre.fr
coursenligne2018.parisnanterre.fr
arnaudnew.parisnanterre.fr
bdr.parisnanterre.fr
comete-gestion.parisnanterre.fr
coursenligne2016.parisnanterre.fr
*.faraway.parisnanterre.fr
ladro.admc.parisnanterre.fr
*.faraway.parisnanterre.fr
gestiondmzhttp.parisnanterre.fr
coursenligne.parisnanterre.fr
oseprod.admc.parisnanterre.fr
*.saisine.parisnanterre.fr
upnidp1.parisnanterre.fr
blogs.parisnanterre.fr
comete.parisnanterre.fr
bdr.parisnanterre.fr
gestiondmzhttppp.parisnanterre.fr
obm3-ui.parisnanterre.fr

Certificate

The complete raw certificate details for coursenligne2018.parisnanterre.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262118154440681751529784203799476624131133
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 21:32:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 21:32:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coursenligne2018.parisnanterre.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759891292786413859889846159246307773829140201050807907497121514120969497624910580623731810694384655686664763376374699951988098987916678632107735289616663969847143054795685791925351758194444028537690399649916404181224637697257801721407428932993538967406252372119960027505246839922437477571436993876053994358141357647386106189977889635095923147074213118363502656977350347223765610110793268391190343180220520384259746692530942957322348384576469006544913986720399240152550996246977509366876710750698657760863249380421851454713333949936266176010922867477933765567137584469950471679904754375887853845427496356780811326744809524940684612316982485890760181420810711077180879081459217332460277686899134928987970206462208403499736748587060256809550568869184909545433698701889416267972892931899325858003119008534521415053804075109412062073778976600200001722435049593945032986234581311546703809830964557340269573698785362766972088584457658299061529648952724754877232000151634577823730793351729987708015806340332763941771966264210690512287344788661511613222637722843938477459786413402115148664074546580125853028897936894917557387703338770174041943420948278003029766275984857856914098925160446647842646221204322726600852397800798018236896158891951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0933696bd7af07ca67c9314094ddd25fdb183bcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursenligne2018.parisnanterre.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c5476d07400000403004630440220794c71cfb2f59f261263e5159e0e31ff59cbc53452f455edf4ab636339e6b18602205545c70c4e1ad22a7af338a369be9f8835639a99aa91e7ced846119bcf4a7a4e007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c5476d0840000040300463044022041199437a9a5df3a27196fe062f3081604d000c8bd1f52b7ce3a391077eed43702201f7dfc53ba039b12df81329173ae2b39b8ca96e764a696aa23e174a7385b238d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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