partir.ouest-france.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:db:ee:2e:83:16:89:4f:7f:08:23:34:05:af:62:47:24:e9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=partir.ouest-france.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:ee:2e:83:16:89:4f:7f:08:23:34:05:af:62:47:24:e9
Serial Number (int): 336175293918399739223231324748376634238185
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:13:14:2f:68:74:f8:98:82:24:4e:4c:5a:c5:02:37:be:1a:e8:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a1:ca:aa:3c:8e:2e:0b:c4:a5:fa:64:bc:33:d0:fb:ee:a1:ba:01:15
Fingerprint (sha256): 0a:df:13:8d:82:7c:5d:6d:48:e0:23:a5:6c:42:f1:59:6a:98:e4:93:58:ec:ac:55:a8:71:16:18:f8:3c:24:b9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate partir.ouest-france.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partir.ouest-france.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

partir.ouest-france.fr

Other certificates including the domain name ouest-france.fr

(limited to 100 certificates)
off7.ouest-france.fr
ledrenche.fr
varnish.prod.aws.ouest-france.fr
madeinsaint-etienne.ouest-france.fr
mcetv.ouest-france.fr
static.blogs.ouest-france.fr
amphisciences.ouest-france.fr
oceanefm.ouest-france.fr
album-photo.ouest-france.fr
*.ouest-france.fr
tls.automattic.com
footamateur.ouest-france.fr
*.staging-k8s.aws.ouest-france.fr
podcasts.ouest-france.fr
*.ouest-france.fr
doc-enligne.ouest-france.fr
jeux-evenements.ouest-france.fr
agrimatic.fr
www.koderia.sk
jeudenoel.ouest-france.fr
w.elections.ouest-france.fr
w.elections.ouest-france.fr
inscription.ouest-france.fr
album-photo.ouest-france.fr
jaime-jardiner.com
extranet.ouest-france.fr
*.aws-sipa.ouest-france.fr
sni294fagl.wpc.edgecastcdn.net
partir.ouest-france.fr
agrimatic.fr
grandtirageausort.ouest-france.fr
*.ouest-france.fr
qualjournal-twipe.ouest-france.fr
of-development-refacto-of.tech.ingress.int.aws.ouest-france.fr
varnish.prod.aws.ouest-france.fr
off7.ouest-france.fr
*.prod-k8s.aws.ouest-france.fr
qual.guideete.ouest-france.fr
qual-dsc-api.ouest-france.fr
*.ouest-france.fr
*.auth.ouest-france.fr
webreader-hst-uat.ouest-france.fr
lattuada-familly.fr
ouest-france.fr
jeux-evenements.ouest-france.fr
madeinfoot.ouest-france.fr
trucmania.ouest-france.fr
weelz.fr
ipe.ivitrack.com
newsletters.ouest-france.fr
qualjournal-twipe.ouest-france.fr
www.ouest-france.fr
mcetv.ouest-france.fr
viceetversa.fr
*.ouest-france.fr
*.staging.aws.ouest-france.fr
link.calomeal.com
tables.chat
webreader-hst-prod.ouest-france.fr
telenantes.com
jaime-jardiner.com
inscription.ouest-france.fr
weelz.fr
mon.staging.aws.ouest-france.fr
of-development-49538-i-of.tech.ingress.int.aws.ouest-france.fr
privacy.ouest-france.fr
*.ouest-france.fr
webreader-cojn-uat.ouest-france.fr
www.portage.ouest-france.fr
vos-commercants.ouest-france.fr
tls.automattic.com
lemagduchat.ouest-france.fr
partir.ouest-france.fr
*.ouest-france.fr
adnanbhanji.com
of-development-47223-c-of.tech.ingress.int.aws.ouest-france.fr
jeux-evenements.ouest-france.fr
jeux-evenements.ouest-france.fr
tls.automattic.com
grandjeu.ouest-france.fr
jeux-evenements.ouest-france.fr
*.aws-sipa.ouest-france.fr
static.blogs.ouest-france.fr
grandjeu.ouest-france.fr
jeux-evenements.ouest-france.fr
runners.ouest-france.fr
grandjeu.ouest-france.fr
lemagduchat.ouest-france.fr
*.ouest-france.fr
webreader-mljn-uat.ouest-france.fr
lemagduchien.ouest-france.fr
podcasts.ouest-france.fr
bricoleurpro.ouest-france.fr
w.elections.ouest-france.fr
w.elections.ouest-france.fr
*.ouest-france.fr
evenements.ouest-france.fr
conjugaison.ouest-france.fr
amphisciences.ouest-france.fr
*.internal.aws-sipa.ouest-france.fr

Certificate

The complete raw certificate details for partir.ouest-france.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6ugEI73J3Bd4w+8sy+v
XFIul3rXXS1BSmtlwayhSQ1gudVms/UCPO+TN0WbuUdZw1HWPIdkFdduoVwbl4oH
8Pn17vlpLYx1hj+KpoG3aEjnB0FeeXICWiB6gNWaLWM6Lfwgv2ojmmKpvxMRn9vg
rWz4hUhdZhPDhWiUO0dwHxaHhWRQaOO9XyrbO+iCJTBp6lhP5OMTCwHLSzyVEV4a
0pdZ0cjbzJPKDFpbnggQkVYp7qSixgnT9U4KY171t+ixsBa/telBsiLbnoXvDn7O
aTLbc3yp6U5ee+xuI/aSOZqKG1qjdPma5P8s216zRsiL6G7IbsvW5zE9WW3yjOZ3
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336175293918399739223231324748376634238185
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 23:18:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 23:18:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partir.ouest-france.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25711007474459221244724102675878740232401703890817294324711559419982837001119530287146299557799660750303685919326549069657328624171225996166537734624279724638662376446441305855901361237875370946384819428110527687159654689115205775533780436277321088758830867600595871330497986515653640781267950600682219698041379593572745745485575280219766486665520782961868847440842935487882252012870161942761117813099956074628042876357196630540038257891092759091067249496631679513699568927239428544723396013442509995126788286324514955930897351625533424269797893778495791240329278346705450181976393517555941396425540130635649212905377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1413142f6874f89882244e4c5ac50237be1ae867
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partir.ouest-france.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00740048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5116c4310000040300453043021f2ad25394b35c12499c4595eacb9b53a9e38831e520e18ab45c408c2594860702204cb8fae72c149822fdf6c65726c1e3b122b7c1c870e09f8b90014b4dce1332b0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c5116c442000004030047304502206d3a98c7e77f770f93c11544f9296304b1f4c7de3b9d775e79123118ee45302a022100b543070e8a90bf7263f2ae1f748e7d3df68f54ded962900eef7053b2a5fc302e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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