ead2016.parisnanterre.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fd:94:34:bb:62:9f:14:31:59:a7:0d:94:60:88:6a:97:22 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ead2016.parisnanterre.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fd:94:34:bb:62:9f:14:31:59:a7:0d:94:60:88:6a:97:22
Serial Number (int): 347625296169715170893719937063074109495074
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:49:88:6e:8f:b1:0f:25:6b:34:5b:93:7c:b0:65:d1:1a:38:41:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:c7:46:ff:ba:7c:c9:10:c7:de:e9:c9:0c:90:52:d6:dc:68:06:51
Fingerprint (sha256): 09:97:10:c4:a1:ef:7e:fc:a4:eb:a3:a3:f0:56:c5:e9:8c:4f:ae:e4:6e:23:5d:e2:1b:ee:3e:37:a7:5e:3c:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ead2016.parisnanterre.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ead2016.parisnanterre.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ead2016.parisnanterre.fr
ead2016.u-paris10.fr

Other certificates including the domain name parisnanterre.fr

(limited to 100 certificates)
gestiondmzhttp.parisnanterre.fr
tpl.parisnanterre.fr
sas.parisnanterre.fr
webtv.parisnanterre.fr
*.parisnanterre.fr
coursenligne.parisnanterre.fr
coursenligne.parisnanterre.fr
ead.parisnanterre.fr
helios.parisnanterre.fr
hal.parisnanterre.fr
formation.parisnanterre.fr
coursenligne2018.parisnanterre.fr
50ansnumerique.parisnanterre.fr
tpl.parisnanterre.fr
comete-red.parisnanterre.fr
examens-phillia.parisnanterre.fr
examensenligne.parisnanterre.fr
ha1.parisnanterre.fr
ent.parisnanterre.fr
comete-stats.parisnanterre.fr
alba.parisnanterre.fr
viatori.parisnanterre.fr
hemera.admc.parisnanterre.fr
consultation.parisnanterre.fr
ead2016.parisnanterre.fr
examensenligne.parisnanterre.fr
comete-stats.parisnanterre.fr
projets.parisnanterre.fr
sas.parisnanterre.fr
ead.parisnanterre.fr
ead.parisnanterre.fr
coursenligne.parisnanterre.fr
baras.parisnanterre.fr
hector.admc.parisnanterre.fr
obm-bkd.parisnanterre.fr
ead.parisnanterre.fr
dante.parisnanterre.fr
webtv.parisnanterre.fr
coursenligne2016.parisnanterre.fr
coursenligne.parisnanterre.fr
comete-gestion.parisnanterre.fr
adum.parisnanterre.fr
coursenligne.parisnanterre.fr
gestiondmzhttp.parisnanterre.fr
webtv.parisnanterre.fr
examensenligne.parisnanterre.fr
ead.parisnanterre.fr
ecandidataspp.parisnanterre.fr
cousinade.grimbert.com
ha2.parisnanterre.fr
recharger.parisnanterre.fr
tpl.parisnanterre.fr
upnidp2.parisnanterre.fr
fichiers.parisnanterre.fr
projets.parisnanterre.fr
blogs.parisnanterre.fr
ssl471393.cloudflaressl.com
amphion.admc.parisnanterre.fr
gluttony2-rec.admc.parisnanterre.fr
eportfolio.parisnanterre.fr
horus.parisnanterre.fr
jason.parisnanterre.fr
coursenligne.parisnanterre.fr
viatori.parisnanterre.fr
upnidp2.parisnanterre.fr
hemera73.parisnanterre.fr
coursenligne2018.parisnanterre.fr
volnay.cva.parisnanterre.fr
imprimer.parisnanterre.fr
webtv.parisnanterre.fr
*.parisnanterre.fr
bene.parisnanterre.fr
primo-stag.parisnanterre.fr
examens-spse.parisnanterre.fr
longaway.parisnanterre.fr
tpl.parisnanterre.fr
coursenligne2016.parisnanterre.fr
50ansnumerique.parisnanterre.fr
ead2016.parisnanterre.fr
santenay.cva.parisnanterre.fr
spwifi.parisnanterre.fr
comete-stats.parisnanterre.fr
coursenligne2018.parisnanterre.fr
arnaudnew.parisnanterre.fr
bdr.parisnanterre.fr
comete-gestion.parisnanterre.fr
coursenligne2016.parisnanterre.fr
*.faraway.parisnanterre.fr
ladro.admc.parisnanterre.fr
*.faraway.parisnanterre.fr
gestiondmzhttp.parisnanterre.fr
coursenligne.parisnanterre.fr
oseprod.admc.parisnanterre.fr
*.saisine.parisnanterre.fr
upnidp1.parisnanterre.fr
blogs.parisnanterre.fr
comete.parisnanterre.fr
bdr.parisnanterre.fr
gestiondmzhttppp.parisnanterre.fr
obm3-ui.parisnanterre.fr

Certificate

The complete raw certificate details for ead2016.parisnanterre.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347625296169715170893719937063074109495074
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 22:31:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-19 22:31:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ead2016.parisnanterre.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1012800750358363533856312663739768466063103008295159230085930115254022404181654936327600159781364290736800249976014595635721268895976795867633843172166898716122070812242892195339920237813614787870989319191355023882945088503396510027341537987859858549648133264149047084124140036669032609974931935899789244863050694997625259169994427931294893751293239052688430388325357960292168857282899957674874490443627188543092013617468381146388399541870192255751105656193664730571145075453269247060893195568501364041804383399496737290974007261508831238989541187433712057667570334707751279929564194291107266238271961879907555385590460962008500332601943976064713023026812552086879282017098649728664042896285220859568513848379049092144024449504546292718638866634074070234406107055547787053095731672612566004915178281731005142570206588793087122627679218980536730876585632350418037482428716084803613425959219542928254936918238762539527356563716914940915620329551903653632063291025241725144689298998191019785207238546316058037250755182115453837518033279029922486992293340480720354396726633982676805890717802965105327680295148585168315827596568635898367921888469061086090345893625376046165696427217588145195759373608164777595150330413527848035011542926323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf49886e8fb10f256b345b937cb065d11a38417b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ead2016.parisnanterre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ead2016.u-paris10.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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