web.epita.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:00:67:e4:cc:12:39:a5:1e:85:91:47:aa:93:81:4e:65:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web.epita.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:67:e4:cc:12:39:a5:1e:85:91:47:aa:93:81:4e:65:1b
Serial Number (int): 261474956261585838548132553203926195660059
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:08:d1:e5:bf:30:f5:75:f1:ed:68:91:aa:df:00:81:d6:8a:74:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:5a:40:07:64:74:01:66:e7:5f:4b:e8:d9:68:4e:45:dd:cf:6e:64
Fingerprint (sha256): 12:89:33:cd:2d:14:49:8d:a0:78:a1:c5:c1:23:df:04:ec:07:5d:70:95:38:c8:37:66:ca:25:81:48:4a:76:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate web.epita.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.epita.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.epita.fr

Other certificates including the domain name epita.fr

(limited to 100 certificates)
git.acu.epita.fr
web.epita.fr
lse.epita.fr
lse.epita.fr
lse.epita.fr
tips.assistants.epita.fr
sigl.epita.fr
lists.lrde.epita.fr
acu.epita.fr
synergie.epita.fr
gitlab.cri.epita.fr
tips.assistants.epita.fr
epita.net
assistants.epita.fr
toulouse.epita.fr
owncloud.srs.epita.fr
acu.epita.fr
wiki-prog.infoprepa.epita.fr
scrooge.acu.epita.fr
intra.tcom.epita.fr
lama-corp.space
srs.epita.fr
cri.epita.fr
cri.epita.fr
git.srs.epita.fr
srs.epita.fr
acu.epita.fr
static.acu.epita.fr
intra.acu.epita.fr
intrachievement.acu.epita.fr
logement.epita.fr
algo-share.infoprepa.epita.fr
static.acu.epita.fr
git.srs.epita.fr
tips.acu.epita.fr
assistants.epita.fr
bubuntu.net
mail.mti.epita.fr
lama-corp.space
lists.lrde.epita.fr
fic.srs.epita.fr
assignments.lrde.epita.fr
www.lse.epita.fr
lists.lrde.epita.fr
algo-td.infoprepa.epita.fr
synergie.epita.fr
lse.epita.fr
chronos.mti.epita.fr
infoprepa.epita.fr
algo.infoprepa.epita.fr
www.lrde.epita.fr
wiki-prog.infoprepa.epita.fr
web.epita.fr
teamcity.lrde.epita.fr
pantheon.acdc.epita.fr
chronos.mti.epita.fr
rendu.infoprepa.epita.fr
synergie.epita.fr
tickets.cri.epita.fr
keycloak.assistants.epita.fr
intra.tcom.epita.fr
chronos.mti.epita.fr
intrachievement.acu.epita.fr
wiki-root.mti.epita.fr
srs.epita.fr
tcom.epita.fr
lse.epita.fr
lse.epita.fr
lists.lrde.epita.fr
defenses.assistants.epita.fr
www.lrde.epita.fr
tcom.epita.fr
assistants.epita.fr
gitlab.lrde.epita.fr
gitlab.lrde.epita.fr
intra-defenses.acu.epita.fr
lists.lrde.epita.fr
tcom.epita.fr
lse.epita.fr
fic.srs.epita.fr
git.srs.epita.fr
cri.epita.fr
lse.epita.fr
assistants.epita.fr
assistants.epita.fr
algo.infoprepa.epita.fr
tcom.epita.fr
gitlab.srs.epita.fr
prospect.epita.fr
gitlab.lrde.epita.fr
static.acu.epita.fr
photos.cri.epita.fr
git.acu.epita.fr
photos.cri.epita.fr
sni.cloudflaressl.com
chronos.mti.epita.fr
nas.tcom.epita.fr
static.acu.epita.fr
web.epita.fr
lse.epita.fr

Certificate

The complete raw certificate details for web.epita.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnLFcmuJpTOe8gMEVXzde
GCyshw3VgfKjuD7l+qNHKHfMlePQversl/BCDqOkcxcSIilMYWBuMp8Wp7GZ2oAd
mRfj4xamzkhpJRNiil8duOUbvLjm2rMustMv4SgPNGsmv/xSMc+76Suv1m1eV6sx
8MP3MiuHOr5j26gBdsC1uBBUs5wvUg/dlUYwvr64Yh7xgDRu6xzr79fOpWSOXd18
HAJgrhGxnMByQcvWVAG/Y8TUn68mwBhnpXWREGyYuIydgQ6rjYufhqDNW3VmXkqj
QBQ4Bl0ktwFJkZj9UINNecRUxOtLwmnnkbO8RoLtwd83iXRgeY9TxbiBB5n3+rCs
Oe5uy3IP0jyGXHAUCipsK+h7e8LuWfI1uW4pSVZKUbA+1+6gqe8dkhxc7dI5TDVO
8jFs4fAua0hBqkBPsqtY2YMnTdaijH/pqEoyY4mCInhtcwCKRVDbdmTmdOBFmLkz
HZha365/h34UP5rR9tQZgfMecJnqeVUA4DLywVxe/YFOmmcG7W5APFEo6KUbZGjv
I/PKlTk05McE7DH0nZfRw1VxVKs0rzUhn5mIHs2ILPXh9Bk+p3cUYxkXiYeJr+xr
KmugqJsUKk9XhqdrdoC1pt6lxlAv5Ocw7EGe+ccQDU+WdFu0UwTJC+oxqGsRFlwj
ARhgz5wUB5i7vGkqV8RN09UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261474956261585838548132553203926195660059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 18:52:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 18:52:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.epita.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 639250930719530201187761900316536001834014654284388289861694031117844990444465514546279084904885711554275384927484317845012582956270348249308060131260428896189459988785914941955986704283541712606159312557071626379677537856100658260542579860924998871862876425332347254624944884648918625012447532954029681145387484216652939159485865991516264218558269555306724323439607410919751623535012656008334384398673506933557785467577386918093032811592952922974404998982637707235976656726275319932090708114179912425162153241545549255401343222257438773139259291500150103129100152920524686828713651568822066870014712309939802505285073788426276376546943306655828760938448600988270263422281634309141112198373926432617798538973877447271478817551804466544491343894930556054234119383571625762090755817927913576525921114631332119790913318750255669561619819990962799395648126448674013251879537208455322293350681981804308295471508394026338889595022530095737444264395225918524125312256858301924763515335872068028132338512010026091152772687692818707756748761375990015907450849854784507408319201881095952921843156596287720965411399772422905920882374066024022907302871137373703538249815432194329697828582613257452856683397962606101403377335871214751802295440341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b08d1e5bf30f575f1ed6891aadf0081d68a741e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.epita.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3ba2827a000004030046304402205c285a95bce14e4f8b9469998126f6ceeea63daf76c6d4a9465b48f596219d94022070def03edeebe0bfef2265035161a7cc2b4bd7fc601eac6eeae9d412b21f5c2f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3ba28296000004030047304502200bea93822f57999df82b1346fcd11d7a4783456d8c262b7310ad06c1a53a8b0a02210094ea82417e4a5dfb75c4469eb2bc27ae3f87ed67da9301d46e0b950a8a5dc3a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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