lexpress.fr.xiti-https.cloud.ger.systems
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:44:ef:89:f7:43:a6:45:70:eb:f0:95:15:97:8d:8b was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lexpress.fr.xiti-https.cloud.ger.systems
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:44:ef:89:f7:43:a6:45:70:eb:f0:95:15:97:8d:8bSerial Number (int): 16308670562477476606616103433998405003
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f3:95:59:ad:e7:76:e7:a9:14:f2:fa:d4:15:39:6a:22:89:20:cd:ab
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 88:13:37:81:ce:14:79:dd:b8:b6:e7:fa:c5:07:4d:55:b9:9a:5e:6d
Fingerprint (sha256): 0d:b2:38:e8:a2:3a:f7:13:ab:14:67:43:66:c4:39:45:85:64:0b:0f:43:fd:5f:af:d3:36:be:48:8c:63:17:11
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate lexpress.fr.xiti-https.cloud.ger.systems
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lexpress.fr.xiti-https.cloud.ger.systems
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lexpress.fr.xiti-https.cloud.ger.systems
Other certificates including the domain name ger.systems
(limited to 100 certificates)
communaute.angry-pangolin.cloud.ger.systems
lexpress.fr.xiti-https.cloud.ger.systems
production.customerhappiness.cloud.ger.systems
front.staging.liberation.cloud.ger.systems
staging.customerhappiness.cloud.ger.systems
*.cloud.ger.systems
demo.ch.cloud.ger.systems
api-live.cloud.ger.systems
staging.customerhappiness.cloud.ger.systems
staging.customerhappiness.cloud.ger.systems
*.lexpress.fr
*.cloud.ger.systems
liberation.api.staging.cloud.ger.systems
api-live.cloud.ger.systems
lexpress.fr.staging.ch.cloud.ger.systems
api.lexpress.fr.euro2016.cloud.ger.systems
api-live.cloud.ger.systems
demo.ch.cloud.ger.systems
communaute.utf-8.cloud.ger.systems
api-live.cloud.ger.systems
communaute.angry-pangolin.cloud.ger.systems
registry.tools.cloud.ger.systems
production.customerhappiness.cloud.ger.systems
lexpress.fr.staging.ch.cloud.ger.systems
production.customerhappiness.cloud.ger.systems
lexpress.fr.staging.ch.cloud.ger.systems
registry.tools.cloud.ger.systems
moncompte.lexpress.fr
*.cloud.ger.systems
communaute.perf.cloud.ger.systems
api-live.cloud.ger.systems
*.cloud.ger.systems
communaute.resultats-examens.cloud.ger.systems
registry.tools.cloud.ger.systems
registry.tools.cloud.ger.systems
*.lexpress.fr
static.cloud.ger.systems
static.cloud.ger.systems
api-live.cloud.ger.systems
api-live.cloud.ger.systems
lexpress.fr.staging.ch.cloud.ger.systems
*.cloud.ger.systems
production.customerhappiness.cloud.ger.systems
production.customerhappiness.cloud.ger.systems
api-live.cloud.ger.systems
api-live.cloud.ger.systems
staging.customerhappiness.cloud.ger.systems
demo.ch.cloud.ger.systems
moncompte.lexpress.fr
lexpress.fr.xiti-https.cloud.ger.systems
production.customerhappiness.cloud.ger.systems
front.staging.liberation.cloud.ger.systems
staging.customerhappiness.cloud.ger.systems
*.cloud.ger.systems
demo.ch.cloud.ger.systems
api-live.cloud.ger.systems
staging.customerhappiness.cloud.ger.systems
staging.customerhappiness.cloud.ger.systems
*.lexpress.fr
*.cloud.ger.systems
liberation.api.staging.cloud.ger.systems
api-live.cloud.ger.systems
lexpress.fr.staging.ch.cloud.ger.systems
api.lexpress.fr.euro2016.cloud.ger.systems
api-live.cloud.ger.systems
demo.ch.cloud.ger.systems
communaute.utf-8.cloud.ger.systems
api-live.cloud.ger.systems
communaute.angry-pangolin.cloud.ger.systems
registry.tools.cloud.ger.systems
production.customerhappiness.cloud.ger.systems
lexpress.fr.staging.ch.cloud.ger.systems
production.customerhappiness.cloud.ger.systems
lexpress.fr.staging.ch.cloud.ger.systems
registry.tools.cloud.ger.systems
moncompte.lexpress.fr
*.cloud.ger.systems
communaute.perf.cloud.ger.systems
api-live.cloud.ger.systems
*.cloud.ger.systems
communaute.resultats-examens.cloud.ger.systems
registry.tools.cloud.ger.systems
registry.tools.cloud.ger.systems
*.lexpress.fr
static.cloud.ger.systems
static.cloud.ger.systems
api-live.cloud.ger.systems
api-live.cloud.ger.systems
lexpress.fr.staging.ch.cloud.ger.systems
*.cloud.ger.systems
production.customerhappiness.cloud.ger.systems
production.customerhappiness.cloud.ger.systems
api-live.cloud.ger.systems
api-live.cloud.ger.systems
staging.customerhappiness.cloud.ger.systems
demo.ch.cloud.ger.systems
moncompte.lexpress.fr
Certificate
The complete raw certificate details for lexpress.fr.xiti-https.cloud.ger.systems in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhDCCA2ygAwIBAgIQDETvifdDpkVw6/CVFZeNizANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNzA4MzEwMDAwMDBaFw0xODA5MzAx MjAwMDBaMDMxMTAvBgNVBAMTKGxleHByZXNzLmZyLnhpdGktaHR0cHMuY2xvdWQu Z2VyLnN5c3RlbXMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe6s01 gxC6p/WkAoJeEypCuwvv7GvHvAjV6KRfYev4aft3Am9eC5aO4XqjkkHX68e22RnZ D7LmELLQ92FBVCT/wBuAWHLM3kMKpS/aU3ZtvRaxQEFu160eccXuDAdqxGdzoMLN ei6sU6sEqrgoZqEG932hxu+wHTB/Jlb98Y+SY82tp/VUICCxyC7tehuQL2mENMm4 CPrRyA/an+CbMa+UtpJHGUe01vH+sFMaR6bMWP81zQFsjoeb0aIE1bUyy3FWIWmy ewrk9RQiypYVGpRaUo9S7IEHgN38uBpNr5XjVJAPjzyU+ctN5YFDhkcGDnFMm5pq i12j3Wjs7vUkiBPDAgMBAAGjggF/MIIBezAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8 o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU85VZred256kU8vrUFTlqIokgzaswMwYDVR0R BCwwKoIobGV4cHJlc3MuZnIueGl0aS1odHRwcy5jbG91ZC5nZXIuc3lzdGVtczAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAIqMPWlQIjor hWMjBfda9L5vWYhyuBUzhRKtIVcJwPA80eNfRrZ0NHNMn3rJKYdW04nMd1ncNcHU G8+L7+IdcqLCwjrN8GsXNT6KNbptbc/qLs/Xo8Xg5NcELvwqpP6Eq9i8IUu7M+vv HsQQwpXHRnwxvDQSVyAqNLM5qGs7d1igwYz9JJCvs1gAegZ54VActL7moG9MGFp7 +CxQ3bPaK7zQ6cqisBMWNh6TzubjniHymnGMWD+9htL1sJt7GLzFZL+wsS8HuqpE 3OfaAbzNN9dOH8G/+qdEagdeOT9zavCkRObFUCUTjBKbBGG+QWKIz3nRTpt0zRr3 eb1o6otyPhg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnurNNYMQuqf1pAKCXhMq QrsL7+xrx7wI1eikX2Hr+Gn7dwJvXguWjuF6o5JB1+vHttkZ2Q+y5hCy0PdhQVQk /8AbgFhyzN5DCqUv2lN2bb0WsUBBbtetHnHF7gwHasRnc6DCzXourFOrBKq4KGah Bvd9ocbvsB0wfyZW/fGPkmPNraf1VCAgscgu7XobkC9phDTJuAj60cgP2p/gmzGv lLaSRxlHtNbx/rBTGkemzFj/Nc0BbI6Hm9GiBNW1MstxViFpsnsK5PUUIsqWFRqU WlKPUuyBB4Dd/LgaTa+V41SQD488lPnLTeWBQ4ZHBg5xTJuaaotdo91o7O71JIgT wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16308670562477476606616103433998405003 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lexpress.fr.xiti-https.cloud.ger.systems' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20061437167866978650969237909178678997224244413489990105673257266114199568996913290101144169009181316347483042928074364996157162680133455447663730934898192160930761287487626979268485020719897217294381831794044656849387922750353149518265030090690221919589525238644191913998858247838988679228374433555758394394448414016840758468423158066346592199555343691816961210767397253871353941960609243085497587417388383677974355902724399782586124208918831991779214579689817202909219741477775133845946837577842398351833255096943775848331141824958843297887681701502148434421599092943896087685735302597414488162079627326703956136899 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f39559ade776e7a914f2fad415396a228920cdab . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexpress.fr.xiti-https.cloud.ger.systems' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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