annexio.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e3:f7:4a:a4:8f:5e:7e:ea:58:e4:8e:ce:ad:39:c7:77:c7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=annexio.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:f7:4a:a4:8f:5e:7e:ea:58:e4:8e:ce:ad:39:c7:77:c7
Serial Number (int): 338909661968934224204573253476303271065543
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:03:c0:9a:a8:8b:05:af:9e:1a:29:6a:71:32:ea:06:67:40:00:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:0e:a3:d1:93:6a:3d:5f:ef:31:b1:37:8a:ab:ac:b8:48:2b:1c:b4
Fingerprint (sha256): 0e:a1:01:5e:d1:32:56:fe:86:64:a8:be:28:c2:2b:48:0d:86:d3:1d:03:fd:70:85:b9:e3:e8:b7:34:ac:31:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate annexio.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for annexio.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annexio.fr
www.annexio.fr

Other certificates including the domain name annexio.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for annexio.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338909661968934224204573253476303271065543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-31 22:37:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-31 22:37:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'annexio.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835529473848686091255592370683763720428656156590180930510799762903779428782973003998403048537838240550224226189662429700036779763993047778577528983637136259838028775873756346076784234804553314028749248732061139720449686627100657683495632247540545340948823774772110340190768195177344174324874556580673294495734223556012200536777202468309862335895009270326597938713353823059098867257780495262462971963539529707070894043862205584461504287417606063940790365012201856407570858492088152954068894032979588016974084541833467158335135709021143546159378748591301388534227222394492739823379928344544278805904453789681439269226588251660460832531833195166692937921776101495142383972683987583733671701788730428704253163992022508509555883416075056989843822690019258008077103907350340120858760202225010181961157144948034064575622294744301893241789391309345528109362345888815565447529411673123277678350048301113675259018797178507249259911293466278311513782869204531713622866163513204768681736302583529058210796633982575159055471993635733857837094515654203799846925888539446869450943166980692121964577153341847858363221869969797033566827887422829009640987958001849126012498294146527076851556682602792719922067811861462901712875486606794512844976256509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff03c09aa88b05af9e1a296a7132ea066740008b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annexio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annexio.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016806a12d4f000004030046304402200fc26501c5424b8f8d406393c0c24a2cfda33f0464cd6452e3e5cc9445563d1a022074d189c8fe155c97f31d5579a37c1e739c6221d180c3922b171d9cb229dc19aa00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016806a12d510000040300473045022064d866776d8f53ac3eaa2eff81e1d52f3aba1b9e6f6fcca038f2faaba0e45d7b022100c373a58fe997bf46f44325128a153922b58593f8d9fad86cd9370c90d4b97f22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0086e5fc0ee01b7c6ff6075bc4811455c31ff1972cab99c01dc9ad3905f8886014dce5a906fad8f07634edc94101ead58177a144f5a88fbef539bb03d6f2bb938880858415b66da4f2d090794c7d4945bbb7f99830261bfe5e64f4089b6c10b86c2708902bb13e704d97cf5769495df35c7a1f9337f9818c9cb2fc841da35be7174e777399124aacf3af8f6523f31f2b4796b6815a840ac66331951b8712582f03a9b55a9a2ffeda7f380e00c755ce43be5440d2d36d8faf36d8d4379043e8d75a7bbabd8fa8aab454b1e634e2f13def4a5f8d570297ed8edbc5c72236a9ef99b660621cd2dfb1aa7614d6d9be864a704223d1a4e3ec34c85664e1c48784e03bbf