shop-dev.kinepolis.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:43:eb:20:ba:b6:c7:7b:f9:83:a0:72:03:75:0d:ba:27:64 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop-dev.kinepolis.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:eb:20:ba:b6:c7:7b:f9:83:a0:72:03:75:0d:ba:27:64
Serial Number (int): 284448314898501994586468712420045630351204
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:ec:36:26:58:02:fd:76:4d:7d:8f:6d:e4:70:f4:73:a5:56:85:7e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:2b:40:99:ae:83:60:f3:e7:33:7e:b1:66:3d:52:ba:27:2b:d4:8e
Fingerprint (sha256): 10:b5:93:18:30:98:c7:26:42:47:ed:62:2b:75:24:d2:0a:a8:9b:39:fd:02:07:b7:79:0e:8c:05:e0:99:28:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop-dev.kinepolis.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop-dev.kinepolis.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop-dev.kinepolis.be
shop-dev.kinepolis.es
shop-dev.kinepolis.fr
shop-dev.kinepolis.lu

Other certificates including the domain name kinepolis.fr

(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
kinepolis.biz
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
tickets.kinepolis.be
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.biz
kinepolis.fr
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.megatix.be
*.kinepolis.fr
tickets.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
shop.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.lu
*.kinepolis.fr
shop.kinepolis.be
kinepolis.biz
kinepolis.biz
kinepolis.biz
kinepolis.fr
kinepolis.lu
shop.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
shop.kinepolis.be
shop-dev.kinepolis.be
kinepolis.megatix.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
tickets.kinepolis.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
www.kinepolis.fr
shop.kinepolis.be
kinepolis.fr
tickets.kinepolis.be
kinepolis.biz
*.kinepolis.fr
*.kinepolis.fr
kinepolis.biz
kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
www.kinepolis.fr
kinepolis.megatix.be
kinepolis.megatix.be
shop-dev.kinepolis.fr
kinepolis.megatix.be
shop-dev.kinepolis.be
*.kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.fr
tickets.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.biz
shop-dev.kinepolis.fr
kinepolis.fr
kinepolis.biz
kinepolis.biz
shop.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
kinepolis.lu
kinepolis.biz
shop-dev.kinepolis.fr
kinepolis.biz
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.biz
kinepolis.biz
kinepolis.fr

Certificate

The complete raw certificate details for shop-dev.kinepolis.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284448314898501994586468712420045630351204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-28 07:21:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 07:21:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop-dev.kinepolis.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763535552572112706654570610537333758110078527226404104678740140153720295204113808524922639086860175285140902345753898052849927963693457100166618414497213449190694689739689700463207978774570478004219025619817304619717510464369258114809494436693605823314784070362470667262394287192079527749422808128337580114248302644340526054241931414104718011299724604699159233797437953441654257763562760356877130356174335090095134697004892956280350669661732451952907793183100396540516578418998606976295559142259869402512745918760314299087025452799616548542716791871457204644064089914106405413123462915191527175196138989537873659650084387849607341384185235543003686837604418089989810342957013341857878257083227120310852559997088831979339697316673391594520797294007951378561820564941830497453285809626725031181183402727645251085450320450454608915803221719896783601781908426760497058407062343775675729016281446464734042773221412415674585003206011191413721345610994152450661790773772546460788735632833510743253544059627733602373754262484748459089969491808401200586577260238351565229157494524754770748091993507840241761554886955165632315343481939701359144988328282601209081949917955875985954878935558162651700326677136239328148047271418908963025467101351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2ec36265802fd764d7d8f6de470f473a556857e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000018109c16a4000000403004730450220799ca98a2d8cc7561501390984b1cfd93585ac2bebf6bc5d015a4dff61abb34d0221009a536771b54cf3d010aee3966055f36a9be2e6a543811641375542e4807a30c60076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000018109c16a650000040300473045022100df34399b9b28b54183756b048a671d22ff8f531366a31ba8efa4df83cfb5d1e1022058d2cbce93566d4ed6f6234cf3bee4cb11b811fd3dad25fc66855c214f998197
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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