www.laposte20projetspour2020.fr

- LA POSTE - DSI CENTRALE -

Issued by Certinomis - Easy CA

About this certificate

This digital certificate with serial number 5d:0f:74:4d:e8:f7:58:42:a3:51:46:10:b6:d5:48:e7:34:d3:a2:43 was issued on by Certinomis.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • SAN DNSName contains duplicate values (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

LA POSTE - DSI CENTRALE

Company registration number: 1-8826
Organization: LA POSTE - DSI CENTRALE
Organization unit: 0002 356000117
Locality: Nantes
Country: FR

Certinomis

Organization: Certinomis
Organization unit: 0002 433998903
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:0f:74:4d:e8:f7:58:42:a3:51:46:10:b6:d5:48:e7:34:d3:a2:43
Serial Number (int): 531280784401170554679484854154107094964913807939
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 51:f5:83:8d:a7:ec:91:21:4e:97:b0:46:ea:92:72:0f:b3:a5:2d:0d
AuthorityKeyId: 2c:c5:e3:20:2f:ab:0a:11:d6:f7:3a:d7:51:78:f4:6c:8f:b1:00:59

Fingerprint (sha1): 45:9c:bf:87:0f:3a:5e:ac:78:6b:e0:07:02:ee:25:28:af:47:50:51
Fingerprint (sha256): 06:a6:fd:2f:67:ab:8b:c1:d4:69:96:7b:55:29:dd:48:e1:6f:22:dd:7c:4d:6f:6c:09:b1:8a:70:ea:9c:ae:4a


Revocation information

OCSP Server: http://igc-g3.certinomis.com/INSTANCE_SHA2/ocsp/OCSP_EASY
CRL Distribution Point: http://crl.igc-g3.certinomis.com/INSTANCE_SHA2/crl/AC_EASY-crl-1.crl
CRL Distribution Point: http://www.certinomis.com/crl/acg3-EASY.crl

Check the revocation status for certificate www.laposte20projetspour2020.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.laposte20projetspour2020.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr

Other certificates including the domain name laposte20projetspour2020.fr

(limited to 100 certificates)
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
internet.extra.laposte.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
internet.extra.laposte.fr
laposte20projetspour2020.fr
www.laposte20projetspour2020.fr
candidats.laposte20projetspour2020.fr
laposte20projetspour2020.fr
internet.extra.laposte.fr
internet.extra.laposte.fr
www.laposte20projetspour2020.fr
internet.extra.laposte.fr
candidats.laposte20projetspour2020.fr
internet.extra.laposte.fr
www.laposte20projetspour2020.fr

Certificate

The complete raw certificate details for www.laposte20projetspour2020.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc8S4wmtWM9KMHZoa5m0
Lr3uldK1f10MtCKlAvQUsIl55i1hiUi75zfghp9S6OPx4IcQKp0EDrch4kJXm/nc
D/kMtX3X9VyGEJPRpOXMsVxYJO3tsxdxMW5q1VZQWZ0/tT4IKUcY7QebJP0xdmHo
UKyLg9m4rIM6G6GA46y5iguPNGaT08GeyByKrhIT2WWCk3NfNh0aHIRT1MmIlg5J
QIjJxQRdnUUuvFw05KSSs6GGv68evLBA748L9DphAp+TXswmTTrLDRc8G3lbLVHi
2uPDuLEvuOKXypEOPBUjM66vBbHPzzDBJTJf7XCxx6bxusOJ77inhS1/yX8UzEv0
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 531280784401170554679484854154107094964913807939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certinomis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0002 433998903'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certinomis - Easy CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-01 12:39:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-01 12:39:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LA POSTE - DSI CENTRALE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0002 356000117'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nantes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.laposte20projetspour2020.fr'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1-8826'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19921525764784168659734994678490907601151738447184759283144037148568993334608751171565301744656214858747255562524845131289335428686745072720401824363221841087125152122198033318725595840629983351371448142169102637963352797147399216404408964649915951310072104766926629433838122806046014084381157732283328815098156039854413040966215579964172450809254387407533659294992966777864730023040069696710849434648941703457902918080518752422795727592304979516380244830674643412921370212206560039493381744418574024055573823797890535287220509895035989086581970666729383877886705172053939643323753351452587367720411541885458750108831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://igc-g3.certinomis.com/INSTANCE_SHA2/ocsp/OCSP_EASY'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2cc5e3202fab0a11d6f73ad75178f46c8fb10059
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.250.1.86.2.3.1.60.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.igc-g3.certinomis.com/INSTANCE_SHA2/crl/AC_EASY-crl-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.certinomis.com/crl/acg3-EASY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laposte20projetspour2020.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laposte20projetspour2020.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51f5838da7ec91214e97b046ea92720fb3a52d0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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