www.ingenews.sncf-reseau.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4b:88:22:80:ec:3d:92:0e:7b:d0:8d:68:9a:97:4a:ff:1f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ingenews.sncf-reseau.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:88:22:80:ec:3d:92:0e:7b:d0:8d:68:9a:97:4a:ff:1f
Serial Number (int): 287038989474736394220425153648216263819039
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:8b:b5:0b:d5:6e:5f:db:f6:56:cb:2c:76:4b:ce:9f:11:b9:23:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:af:73:ea:e4:cc:bd:a1:f9:d6:c8:bb:be:98:55:b5:d1:d1:3f:63
Fingerprint (sha256): 08:29:43:61:aa:70:97:6e:73:85:a1:12:36:eb:98:63:47:1f:e9:0e:19:d0:9f:d8:31:61:71:87:ad:2c:59:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ingenews.sncf-reseau.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ingenews.sncf-reseau.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ingenews.sncf-reseau.fr

Other certificates including the domain name sncf-reseau.fr

(limited to 100 certificates)
seminaire-si-clients-2018.sncf-reseau.fr
portailgaiafab.sncf-reseau.fr
mp-tvp.sncf-reseau.fr
quizzsecuritebpl.sncf-reseau.fr
gameoftrain.sncf-reseau.fr
www.seminaire-si-clients-2016.sncf-reseau.fr
www.seminaire-si-clients-2015.sncf-reseau.fr
www.ingenews.sncf-reseau.fr
www.tvp-paca.sncf-reseau.fr
emploicirculation.sncf-reseau.fr
portailgaiafab.sncf-reseau.fr
www.ingenews.sncf-reseau.fr
journee-fret-grand-est.sncf-reseau.fr
portailgaiafab.sncf-reseau.fr
www.seminaire-si-clients-2015.sncf-reseau.fr
mp-tvp.sncf-reseau.fr
rugbycupip.sncf-reseau.fr
questionnaire-sncf-reseau.fr
lereseauavanceidf.sncf-reseau.fr
mp-tvp.sncf-reseau.fr
lereseauavanceidf.sncf-reseau.fr
mp-tvp.sncf-reseau.fr
journee-fret-grand-est.sncf-reseau.fr
mag.sncf-reseau.fr
www.tvp-paca.sncf-reseau.fr
carteinteractive-idf.sncf-reseau.fr
seminaire-si-clients-2017.sncf-reseau.fr
www.seminaire-si-clients-2016.sncf-reseau.fr
www.seminaire-si-clients-2016.sncf-reseau.fr
www.psef.sncf-reseau.fr
lereseauavanceidf.sncf-reseau.fr
quizzsecuritebpl.sncf-reseau.fr
mag.sncf-reseau.fr
rugbycupip.sncf-reseau.fr
lereseauavanceidf.sncf-reseau.fr
www.ingenews.sncf-reseau.fr
emploicirculation.sncf-reseau.fr
www.seminaire-si-clients-2015.sncf-reseau.fr
livreblanc-dsir.sncf-reseau.fr
journee-fret-grand-est.sncf-reseau.fr
quizzsecuritebpl.sncf-reseau.fr
lereseauavanceidf.sncf-reseau.fr
charte-graphique.ahsm.eu
www.seminaire-si-clients-2015.sncf-reseau.fr
livreblanc-dsir.sncf-reseau.fr
www.ingenews.sncf-reseau.fr
tvb-idf.sncf-reseau.fr
www.seminaire-si-clients-2016.sncf-reseau.fr
lereseauavanceidf.sncf-reseau.fr
charte-graphique.ahsm.eu
seminaire-si-clients-2017.sncf-reseau.fr
quizzsecuritegrandest.sncf-reseau.fr
www.sncf-reseau.fr
quizzsecuritegrandest.sncf-reseau.fr
journee-fret-grand-est.sncf-reseau.fr
mp-tvp.sncf-reseau.fr
mag.sncf-reseau.fr
livreblanc-dsir.sncf-reseau.fr
www.seminaire-si-clients-2015.sncf-reseau.fr
tvb-idf.sncf-reseau.fr
flipbook.sncf-reseau.fr
tvb-idf.sncf-reseau.fr
www.psef.sncf-reseau.fr
rugbycupip.sncf-reseau.fr
www.psef.sncf-reseau.fr
charte-graphique.ahsm.eu
questionnaire.sncf-reseau.fr
gameoftrain.sncf-reseau.fr
emploicirculation.sncf-reseau.fr
www.ingenews.sncf-reseau.fr
questionnaire-sncf-reseau.fr
www.seminaire-si-clients-2015.sncf-reseau.fr
carteinteractive-idf.sncf-reseau.fr
rugbycupip.sncf-reseau.fr
seminaire-si-clients-2017.sncf-reseau.fr
seminaire-si-clients-2017.sncf-reseau.fr
seminaire-si-clients-2017.sncf-reseau.fr
emploicirculation.sncf-reseau.fr
lereseauavanceidf.sncf-reseau.fr
emploicirculation.sncf-reseau.fr
www.psef.sncf-reseau.fr
www.psef.sncf-reseau.fr
tvb-idf.sncf-reseau.fr
gameoftrain.sncf-reseau.fr
www.ingenews.sncf-reseau.fr
www.seminaire-si-clients-2016.sncf-reseau.fr
emploicirculation.sncf-reseau.fr
www.psef.sncf-reseau.fr
www.ingenews.sncf-reseau.fr
gameoftrain.sncf-reseau.fr
rugbycupip.sncf-reseau.fr
journee-fret-grand-est.sncf-reseau.fr
www.psef.sncf-reseau.fr
www.tvp-paca.sncf-reseau.fr
www.seminaire-si-clients-2015.sncf-reseau.fr
www.psef.sncf-reseau.fr
emploicirculation.sncf-reseau.fr
portailgaiafab.sncf-reseau.fr
quizzsecuritebpl.sncf-reseau.fr
gameoftrain.sncf-reseau.fr

Certificate

The complete raw certificate details for www.ingenews.sncf-reseau.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+TdLnmFk1HhCZftkKE5
ocZGKTmtowH3Xrf/6pRdbs4L34c9arNqAiidTicJ+cjuiJgdHTDqAhyt2UrP8i8T
Jj2dnA6ZMRewIhfM8KgFc0XEuQMnvcwLwUvBubN5Fn8AUGjLEm7ErQPZEEonHdMr
Y0vj/sEdaactxZui22S17FfgSZtFPhosjMwIDxP2WdAp1tUdjVQf7x9ekBPspCU+
NuM5m4Q3spovK8xW6MRrbFQV8vfruZvg2cvcSMhBERNbux6u6xj6vyJxgg9eqDKm
PjGp5crE8Ffcy1KVDztuhCb7X7H5zQahM7RKYndSaD41bIyFBio/AT02kuw+abUx
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287038989474736394220425153648216263819039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-28 06:03:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-26 06:03:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ingenews.sncf-reseau.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22709513628829009831242755081739719259046165455760505905883783698501550766665809266589390387473301301520454484199062764152977794849016637834663892620078507508898603282513901118107675727775577154817225650221550034090181643525128167015934946032445458428280873415838083752510402993059172439484111281483923467006151761658810235011678576633512081451182434502341679557818591947430790437364878342336427553793649438803916536562062619920881617135455250274562673681354228449981098892711946161982669497179694136097955553605575220800057431869755440128553475583009503553742820161268915221300906499033145585983153506490310332854663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							278bb50bd56e5fdbf656cb2c764bce9f11b923b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ingenews.sncf-reseau.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166b97bcaeb0000040300473045022100d66108bca9a9e6e052a0309471185747a56325b3d4fed73e3420f522e2486c90022008d0f600cc495665cd861076bf6ea075ff7db9c6f468260c7d2c47cd59006dcf007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166b97bccd40000040300473045022029f826b4305561a1ff67a2f7a9dd74deced79e021037d2a76cf19cc58892cab3022100f9eb6cbf156ae91efba6e10e274ff6139297a011d2a5c3de4c91751bdbf29d49
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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