www.montraitement-cancerdusein.fr
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 04:cb:71:19:ff:ed:00:44:ab:f5:99:20:49:5b:b6:e4 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.montraitement-cancerdusein.fr
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:cb:71:19:ff:ed:00:44:ab:f5:99:20:49:5b:b6:e4Serial Number (int): 6373242217616703186034499839149717220
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 6a:51:15:f7:0b:ec:ea:c7:f3:70:c2:74:e2:21:57:17:41:68:8d:e4
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): bb:e4:72:98:04:60:8d:01:d7:27:34:af:99:3e:41:13:fe:28:ed:6b
Fingerprint (sha256): 10:44:fa:30:5a:c3:ac:b3:29:df:77:2a:aa:90:fd:93:dc:e0:f1:3c:11:cb:8c:12:f7:4a:03:1b:aa:6a:7b:6b
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate www.montraitement-cancerdusein.fr
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.montraitement-cancerdusein.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.montraitement-cancerdusein.fr
prod2-montraitement.exactsciences.net
montraitement-cancerdusein.fr
prod2-montraitement.exactsciences.net
montraitement-cancerdusein.fr
Other certificates including the domain name montraitement-cancerdusein.fr
(limited to 100 certificates)
www.genomichealth.com
www.montraitement-cancerdusein.fr
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
stage.genomichealth.com
www.genomichealth.com
www.genomichealth.com
stage.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
stage.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
stage.genomichealth.com
stage.genomichealth.com
www.genomichealth.com
stage.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.montraitement-cancerdusein.fr
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
stage.genomichealth.com
www.genomichealth.com
www.genomichealth.com
stage.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
stage.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
stage.genomichealth.com
stage.genomichealth.com
www.genomichealth.com
stage.genomichealth.com
www.genomichealth.com
www.genomichealth.com
www.genomichealth.com
Certificate
The complete raw certificate details for www.montraitement-cancerdusein.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgIQBMtxGf/tAESr9ZkgSVu25DANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDkyNzAwMDAwMFoXDTI0MTAyNTIzNTk1OVowLDEq MCgGA1UEAxMhd3d3Lm1vbnRyYWl0ZW1lbnQtY2FuY2VyZHVzZWluLmZyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRdc0sCh0DHWs6TQT+OqBCpfegeG 8bVQIMrbjUnIYbljl6FjRdOJbhdSCB81p43lphs6T/mrj8XiO1CIJbK+vFIMmpF1 Yw2smpY2W5T4Sr8SVjWNgfc/VPArJapwhMC9ZPDo6TVeW16Ea0taPUKIlFGtnLS6 pNd5ocOIrcZjY+C0Xbu03iRDsgesnmcHTbX7Ov9N5T8LmA2n096aCqtgOzFkJNFG 9BuaJRduEfJcRdckszkEgg9ng0bMR9ltBR46gmDC6Xo/p460C75YVKLppNJp6NHk B0Ls+Uy0VBnpEGM3m4/7RqjCKmJiSHmWyqED2sWHhbs5XAPAcH9NElZ03QIDAQAB o4IDPzCCAzswHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0O BBYEFGpRFfcL7OrH83DCdOIhVxdBaI3kMHIGA1UdEQRrMGmCIXd3dy5tb250cmFp dGVtZW50LWNhbmNlcmR1c2Vpbi5mcoIlcHJvZDItbW9udHJhaXRlbWVudC5leGFj dHNjaWVuY2VzLm5ldIIdbW9udHJhaXRlbWVudC1jYW5jZXJkdXNlaW4uZnIwEwYD VR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIy bTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAy LmNlcjAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDu zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYrY4N/FAAAEAwBHMEUC IQDp9k4ESmGmXhdaPxGau8EekCkA83lI6eyb+Eto95jN4wIgKEmqe1voQo5bUsGg 3VRl61AiJYL9LrhyxRKprEw2EwQAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ u7+rOdiEcwAAAYrY4OAMAAAEAwBHMEUCIDlc1Hw9dw/EhvNGt39WI681Sijkwe9p 7QZkju4GTJPXAiEAvkuPaNE4gDn10CISjj74nWIuxKBqtjGhSjrJwfoxYBIAdQDa tr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYrY4N/oAAAEAwBGMEQC IHLO1O1+GPswQk5hg7cJhmQp9WrN5K1jU4zrKC8TtBEbAiAJyARrmPWP4OgTahYu pwT4MyhN19IcaPGzSh50OIEXdzANBgkqhkiG9w0BAQsFAAOCAQEAqoUWGBq45rWP X8FDJr5Ds+g1z3fNFhQ6/MNNGhAd68bP8pr7UeeG3TlOYl6k/4O89NS2LPcWK3bl CsPBBstFQvFk9EeQATGLoR90iO9b1jptVURyU5KdDhn0FmXc7ti/n6ryGzX7V+me ais5z/5zeZorl0xJ6NaTNo8VLVsZwkghstMQTPK/QDbOtlrHACcQWNSzRsl4F3kW /v6Opw5y6W/di2cGYild+EMFttIXEI6uFeWX5QdrycI57pLb3YCaicWAtkDtoHM4 xrtGcsBghhqsPSsPTvpx+h24b7HOr1vK5RtKBJdRUCtTvkPBlTVfpMf5Yr6H6VMq l309zEkFRA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRdc0sCh0DHWs6TQT+Oq BCpfegeG8bVQIMrbjUnIYbljl6FjRdOJbhdSCB81p43lphs6T/mrj8XiO1CIJbK+ vFIMmpF1Yw2smpY2W5T4Sr8SVjWNgfc/VPArJapwhMC9ZPDo6TVeW16Ea0taPUKI lFGtnLS6pNd5ocOIrcZjY+C0Xbu03iRDsgesnmcHTbX7Ov9N5T8LmA2n096aCqtg OzFkJNFG9BuaJRduEfJcRdckszkEgg9ng0bMR9ltBR46gmDC6Xo/p460C75YVKLp pNJp6NHkB0Ls+Uy0VBnpEGM3m4/7RqjCKmJiSHmWyqED2sWHhbs5XAPAcH9NElZ0 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6373242217616703186034499839149717220 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.montraitement-cancerdusein.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23870560161497874150373496991341902901212049963725163699367623124557482219005987808352709737543341372611791861033670001490526481138742799916487878039241346891733631629059671023859225257542612674232257452495632943917036730209470921367642110258446163175063446286503461070317432229003304638806092928689484894309249228043755653937002993460459071391743108751449031775874633573513624083535236390663302601229017331068964453100556852715865462547801024280746153203025025407638397758928785544472761462357961165339560045213922328409659282202433592002230327169944953539154492202414555733957870808083622935489333494201204849669341 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6a5115f70beceac7f370c274e221571741688de4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montraitement-cancerdusein.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod2-montraitement.exactsciences.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montraitement-cancerdusein.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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