fic.srs.epita.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a9:32:03:6d:62:cb:f3:f1:06:ae:c2:b1:a8:08:44:ac:88 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fic.srs.epita.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:32:03:6d:62:cb:f3:f1:06:ae:c2:b1:a8:08:44:ac:88
Serial Number (int): 318911057000209288751921559465198186966152
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:27:e7:fb:42:9a:5e:fc:79:02:b1:f7:ac:b7:ff:ab:b5:3a:2e:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:7c:9e:3a:f3:93:e5:92:f0:a2:59:f2:f9:92:78:2f:75:a3:ed:16
Fingerprint (sha256): 0e:87:84:ca:a1:a9:69:5a:af:75:98:bf:82:ac:96:e4:89:60:82:ac:16:02:a0:68:6f:9e:20:7e:2c:fb:65:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate fic.srs.epita.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fic.srs.epita.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fic.srs.epita.fr

Other certificates including the domain name epita.fr

(limited to 100 certificates)
git.acu.epita.fr
web.epita.fr
lse.epita.fr
lse.epita.fr
lse.epita.fr
tips.assistants.epita.fr
sigl.epita.fr
lists.lrde.epita.fr
acu.epita.fr
synergie.epita.fr
gitlab.cri.epita.fr
tips.assistants.epita.fr
epita.net
assistants.epita.fr
toulouse.epita.fr
owncloud.srs.epita.fr
acu.epita.fr
wiki-prog.infoprepa.epita.fr
scrooge.acu.epita.fr
intra.tcom.epita.fr
lama-corp.space
srs.epita.fr
cri.epita.fr
cri.epita.fr
git.srs.epita.fr
srs.epita.fr
acu.epita.fr
static.acu.epita.fr
intra.acu.epita.fr
intrachievement.acu.epita.fr
logement.epita.fr
algo-share.infoprepa.epita.fr
static.acu.epita.fr
git.srs.epita.fr
tips.acu.epita.fr
assistants.epita.fr
bubuntu.net
mail.mti.epita.fr
lama-corp.space
lists.lrde.epita.fr
fic.srs.epita.fr
assignments.lrde.epita.fr
www.lse.epita.fr
lists.lrde.epita.fr
algo-td.infoprepa.epita.fr
synergie.epita.fr
lse.epita.fr
chronos.mti.epita.fr
infoprepa.epita.fr
algo.infoprepa.epita.fr
www.lrde.epita.fr
wiki-prog.infoprepa.epita.fr
web.epita.fr
teamcity.lrde.epita.fr
pantheon.acdc.epita.fr
chronos.mti.epita.fr
rendu.infoprepa.epita.fr
synergie.epita.fr
tickets.cri.epita.fr
keycloak.assistants.epita.fr
intra.tcom.epita.fr
chronos.mti.epita.fr
intrachievement.acu.epita.fr
wiki-root.mti.epita.fr
srs.epita.fr
tcom.epita.fr
lse.epita.fr
lse.epita.fr
lists.lrde.epita.fr
defenses.assistants.epita.fr
www.lrde.epita.fr
tcom.epita.fr
assistants.epita.fr
gitlab.lrde.epita.fr
gitlab.lrde.epita.fr
intra-defenses.acu.epita.fr
lists.lrde.epita.fr
tcom.epita.fr
lse.epita.fr
fic.srs.epita.fr
git.srs.epita.fr
cri.epita.fr
lse.epita.fr
assistants.epita.fr
assistants.epita.fr
algo.infoprepa.epita.fr
tcom.epita.fr
gitlab.srs.epita.fr
prospect.epita.fr
gitlab.lrde.epita.fr
static.acu.epita.fr
photos.cri.epita.fr
git.acu.epita.fr
photos.cri.epita.fr
sni.cloudflaressl.com
chronos.mti.epita.fr
nas.tcom.epita.fr
static.acu.epita.fr
web.epita.fr
lse.epita.fr

Certificate

The complete raw certificate details for fic.srs.epita.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318911057000209288751921559465198186966152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-28 21:42:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-27 21:42:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fic.srs.epita.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792688962327533021763786654999811958745506938423603379168989780372879709754315350110378432603032127153124167004564989375275356236961858874178027752772866526136812128225220485482366709657179610415408418533988253959456892955028136991295735087519575188379864114923579208022963659539532175444966658041996412638518303236319592690205299659424969671629193194106196629152359624465895531684606504621848034890750121726654096628594313327443441433992424378102246988705462920895207953845690231025267579673325357581771465170098761042753720565068986013695978977782646099698419922523882561085317903294850920542165209145124618265362913902000608693608427315598494033900531041989217856374490911378929229205981166977767257208633494464033449630379884304810092256369386839957130633765565140144199971432083138545805006687629233654036960769164695380569055711480259338569486410668469729787287053735070084102847029223416699628211355925767000240132870166666719165020112501339123268703376014833335659901336242186579475862425991943918861684407079401419910591526746074553403281528849346315025811821359476381909281914325993004469383645339951895191457585977283740065285307220305814199063399376168655542132534870092257601271607597112748933111998755537697770113554081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a327e7fb429a5efc7902b1f7acb7ffabb53a2e8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fic.srs.epita.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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