50ansnumerique.parisnanterre.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:92:69:e7:d4:45:dd:93:77:29:5f:03:16:67:1e:46:86:4a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=50ansnumerique.parisnanterre.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:69:e7:d4:45:dd:93:77:29:5f:03:16:67:1e:46:86:4a
Serial Number (int): 311158856031275646966990625569066845636170
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:03:72:61:fe:ee:c6:84:00:b6:37:c3:3a:d2:5f:4b:4c:da:e9:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:58:be:20:eb:63:bc:32:bb:4e:53:de:bc:30:af:58:46:c1:b4:1c
Fingerprint (sha256): 05:97:8a:4a:89:44:9a:eb:dd:a7:ab:62:1c:51:f5:83:f8:c0:81:84:ac:6b:a3:41:c5:47:d1:fc:25:aa:0c:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 50ansnumerique.parisnanterre.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 50ansnumerique.parisnanterre.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

50ansnumerique.parisnanterre.fr
50ansnumerique.u-paris10.fr

Other certificates including the domain name parisnanterre.fr

(limited to 100 certificates)
gestiondmzhttp.parisnanterre.fr
tpl.parisnanterre.fr
sas.parisnanterre.fr
webtv.parisnanterre.fr
*.parisnanterre.fr
coursenligne.parisnanterre.fr
coursenligne.parisnanterre.fr
ead.parisnanterre.fr
helios.parisnanterre.fr
hal.parisnanterre.fr
formation.parisnanterre.fr
coursenligne2018.parisnanterre.fr
50ansnumerique.parisnanterre.fr
tpl.parisnanterre.fr
comete-red.parisnanterre.fr
examens-phillia.parisnanterre.fr
examensenligne.parisnanterre.fr
ha1.parisnanterre.fr
ent.parisnanterre.fr
comete-stats.parisnanterre.fr
alba.parisnanterre.fr
viatori.parisnanterre.fr
hemera.admc.parisnanterre.fr
consultation.parisnanterre.fr
ead2016.parisnanterre.fr
examensenligne.parisnanterre.fr
comete-stats.parisnanterre.fr
projets.parisnanterre.fr
sas.parisnanterre.fr
ead.parisnanterre.fr
ead.parisnanterre.fr
coursenligne.parisnanterre.fr
baras.parisnanterre.fr
hector.admc.parisnanterre.fr
obm-bkd.parisnanterre.fr
ead.parisnanterre.fr
dante.parisnanterre.fr
webtv.parisnanterre.fr
coursenligne2016.parisnanterre.fr
coursenligne.parisnanterre.fr
comete-gestion.parisnanterre.fr
adum.parisnanterre.fr
coursenligne.parisnanterre.fr
gestiondmzhttp.parisnanterre.fr
webtv.parisnanterre.fr
examensenligne.parisnanterre.fr
ead.parisnanterre.fr
ecandidataspp.parisnanterre.fr
cousinade.grimbert.com
ha2.parisnanterre.fr
recharger.parisnanterre.fr
tpl.parisnanterre.fr
upnidp2.parisnanterre.fr
fichiers.parisnanterre.fr
projets.parisnanterre.fr
blogs.parisnanterre.fr
ssl471393.cloudflaressl.com
amphion.admc.parisnanterre.fr
gluttony2-rec.admc.parisnanterre.fr
eportfolio.parisnanterre.fr
horus.parisnanterre.fr
jason.parisnanterre.fr
coursenligne.parisnanterre.fr
viatori.parisnanterre.fr
upnidp2.parisnanterre.fr
hemera73.parisnanterre.fr
coursenligne2018.parisnanterre.fr
volnay.cva.parisnanterre.fr
imprimer.parisnanterre.fr
webtv.parisnanterre.fr
*.parisnanterre.fr
bene.parisnanterre.fr
primo-stag.parisnanterre.fr
examens-spse.parisnanterre.fr
longaway.parisnanterre.fr
tpl.parisnanterre.fr
coursenligne2016.parisnanterre.fr
50ansnumerique.parisnanterre.fr
ead2016.parisnanterre.fr
santenay.cva.parisnanterre.fr
spwifi.parisnanterre.fr
comete-stats.parisnanterre.fr
coursenligne2018.parisnanterre.fr
arnaudnew.parisnanterre.fr
bdr.parisnanterre.fr
comete-gestion.parisnanterre.fr
coursenligne2016.parisnanterre.fr
*.faraway.parisnanterre.fr
ladro.admc.parisnanterre.fr
*.faraway.parisnanterre.fr
gestiondmzhttp.parisnanterre.fr
coursenligne.parisnanterre.fr
oseprod.admc.parisnanterre.fr
*.saisine.parisnanterre.fr
upnidp1.parisnanterre.fr
blogs.parisnanterre.fr
comete.parisnanterre.fr
bdr.parisnanterre.fr
gestiondmzhttppp.parisnanterre.fr
obm3-ui.parisnanterre.fr

Certificate

The complete raw certificate details for 50ansnumerique.parisnanterre.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311158856031275646966990625569066845636170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 21:41:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 21:41:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '50ansnumerique.parisnanterre.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796268195024197189957508039331291589064892705199785707134849172998697998071358104738619003083394923896973800668163340859521202014336091114984150057722745457029198972125135218166681885625558171465403486333931231140902144944084489465504696207669477739776829356943257645573763945448521254962955242835726473461644035830070799210068929459368265580878639462845079032751024146965946765750313002294109962777324265788429922429443545911201562666783944103738122522709206115801245126022300931280360213414038983033356235648993263011326988347236171723994114380695485476425620517165672439795142263138847171708004817615006328593256329442355905119966010966429758327273395398948999338788862208872600364767849706417581972987657841361315477139146484094479652316464280218808941540384169531684199372792744292625023311018199436005103360411724082918941998942549883603793645550865534339932997837630693292351408112909150469222512606589918553553058858011826513436242501301972496495124687350741001222907703411085931180100198865540652009117124918735858977686939891001949530021830173522366395796539362854907264261611073961586515417418440960678971705770680144045681559081135296117803659286159268890703543916858364934827568422410717028108065927075092325763940664811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca037261feeec68400b637c33ad25f4b4cdae94f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50ansnumerique.parisnanterre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50ansnumerique.u-paris10.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000171475ae32600000403004730450221009a36833e5bcc906b240df2596bcfe38306a8712d8dc749006f2b75c371e7f439022054c01a0179ea034de1f205b75834a32090bdf0ead042014460ca7e30bfd9642f00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171475ae34e0000040300483046022100e89ea79e2d61154c539fcbb442b6603c0d41070fcd88377a7c3219100ab71df2022100da9cb2aaf2ac6c602a29fc23aaf7bcca028557a3de085de1444ebbef19b52e96
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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