tux.creatis.insa-lyon.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:9f:52:08:f7:b8:0d:2a:48:2b:89:52:5b:15:56:3e:5e:1b was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tux.creatis.insa-lyon.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:52:08:f7:b8:0d:2a:48:2b:89:52:5b:15:56:3e:5e:1b
Serial Number (int): 315550797394076415436160227477927120231963
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:bd:ca:88:3a:a2:36:cd:10:b8:28:30:e2:91:73:d7:d8:59:f7:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:ca:40:27:75:35:5c:30:b3:89:e1:a3:60:fb:cb:50:6b:f3:f7:9f
Fingerprint (sha256): 12:ef:60:d6:2d:20:56:92:84:37:24:1e:cd:a0:3b:1a:86:d5:c6:e6:32:c8:3e:b1:17:1f:49:28:ef:93:d3:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tux.creatis.insa-lyon.fr

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tux.creatis.insa-lyon.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

imap.creatis.insa-lyon.fr
mailhost.creatis.insa-lyon.fr
pop3.creatis.insa-lyon.fr
smtp.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr

Other certificates including the domain name insa-lyon.fr

(limited to 100 certificates)
insa-dpadsvil1-01.insa-lyon.fr
cocovn.insa-lyon.fr
www.insa-lyon.fr
reportserver.insa-lyon.fr
reve.insa-lyon.fr
mouvinsa.insa-lyon.fr
gofast.insa-lyon.fr
tc-net2.insa-lyon.fr
reve.insa-lyon.fr
orioai.insa-lyon.fr
telecom.insa-lyon.fr
insa-fd.insa-lyon.fr
svn.insa-lyon.fr
tux.creatis.insa-lyon.fr
jpo.insa-lyon.fr
exal.insa-lyon.fr
vk2000-v6.insa-lyon.fr
aip-primeca.insa-lyon.fr
insa-vcvil1-01.insa-lyon.fr
lamcosbao.insa-lyon.fr
ecole-ete.insa-lyon.fr
myriad.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
servif-cocktail.insa-lyon.fr
dsi.insa-lyon.fr
wiki-dsi.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
desk.creatis.insa-lyon.fr
gtwresd.insa-lyon.fr
sgd.insa-lyon.fr
mediacenter.insa-lyon.fr
aip-foad-web.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresc.insa-lyon.fr
vk2-gm-72.insa-lyon.fr
deep.insa-lyon.fr
cipcnet.insa-lyon.fr
fondation.insa-lyon.fr
insa-vxrmgrvil1-01.insa-lyon.fr
fimi2i.insa-lyon.fr
intranetgi.insa-lyon.fr
liris-ktbs01.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
insa-vxrvil1-06.insa-lyon.fr
*.insa-lyon.fr
dsi-ipam.insa-lyon.fr
*.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
helpdesk.insa-lyon.fr
insa-rproxy-01.insa-lyon.fr
fex.insa-lyon.fr
tux.creatis.insa-lyon.fr
webaedi.insa-lyon.fr
*.docelec.insa-lyon.fr
tux.creatis.insa-lyon.fr
reportserver.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
catalogue.insa-lyon.fr
biosciences.insa-lyon.fr
tux.creatis.insa-lyon.fr
dsi-esb.insa-lyon.fr
neurosens.creatis.insa-lyon.fr
gfc-services-test.insa-lyon.fr
biosciences.insa-lyon.fr
mandril.creatis.insa-lyon.fr
tux.creatis.insa-lyon.fr
gtwresh.insa-lyon.fr
phishing.insa-lyon.fr
cipcnet.insa-lyon.fr
insa-rproxypp-01.insa-lyon.fr
smtp6.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
lune.insa-lyon.fr
virtualstudyfair.insa-lyon.fr
humanheart-project.creatis.insa-lyon.fr
aris-connect.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
intranetgi.insa-lyon.fr
desk.creatis.insa-lyon.fr
glpi.insa-lyon.fr
rpmfind.creatis.insa-lyon.fr
instrumentation.insa-lyon.fr
dsi-gitlab.insa-lyon.fr
phishing.insa-lyon.fr
lire-pp.insa-lyon.fr
envue.insa-lyon.fr
acdc.creatis.insa-lyon.fr
lire.insa-lyon.fr
redmine-pp.insa-lyon.fr
fex.insa-lyon.fr
insa-ppsympa.insa-lyon.fr
casi.insa-lyon.fr
acdc.creatis.insa-lyon.fr
openreports.insa-lyon.fr
*.docelec.insa-lyon.fr
camus.creatis.insa-lyon.fr
departements.insa-lyon.fr

Certificate

The complete raw certificate details for tux.creatis.insa-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuTdVzNZeGPYJTI9zX+y
iWMgxjcOJVgy5rpVumNcB9DhVWpBxOR/OdSdXGv/dfypB9uEGSpp0eE6vjrkRmch
X73rl/IUFzV5PrPXIsGBY4Yg9p0t9YpliJLFwZ5PqCklEt5iAHmolWCVfkCrygjM
6eF4kVPcMigZQspYd2GA1SOImAWD2bbOVueBwG1piQISJWmXqyMIKzsM5jI1qAEV
WbhfK9s6vd/SwUVVTJuRVoay3pUQKN5PAh1Pa2CccjdIVJ124paYoYCfZAkAbUm9
L+O6rZp53/LvDnGZgwyLDLfp9kQIaQ9x+gXikVwjjjCpijTi27lYwoLlZmQuIXex
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315550797394076415436160227477927120231963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-09 06:58:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-08 06:58:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tux.creatis.insa-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26117948169350040880305460854384337146087790092007613063713335701944230642519556888366489155630388331465191514357106771754926414306870509508029224438990567925085472551611662153030557413617885003701399766224773042687232694591963229788174277778297487924338515681508448406030831286005201637089344885641516190660348268374146421768081980584379980553478731708719902111344618115249811395731054003882512884828421183690127228362881894498713055167175796134775942555356100460348180025231745273500431296947947956082455336961399186663385244196033205136403463088906356381246253351369138471045004598296911194372202064146732196278671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cbdca883aa236cd10b82830e29173d7d859f719
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.creatis.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhost.creatis.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop3.creatis.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.creatis.insa-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tux.creatis.insa-lyon.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001800d54f1ce0000040300473045022100a1736a4fbf145309e0f264cc4235f5e3828a19b399932d00e36ee65a260ff2f502202c0b1046a297562a2fba079a75fa49f3963f0955e1a5be0e68b492331dd3fdc10077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001800d54f1b70000040300483046022100f4410e53ec871b7f3dddfb42e681e890717661e8d9e68afa418c2abc56851315022100ca25baa5209d9dde6c8a965ffa2f065477f563570c50e0d5ae294e75b6f1e12b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008bec23b00bdfe52b525133e011bf9c80238657f5c5d45e9b5d8647858b31b69ea3596618e0a8541d7a32be83aa1837a8cffe210ef8211cbb433d007223903d5057046fa1662a4e7405d7e537b19e317e8075fcecc1dbdde818fe4b88f8883ba707dbc2b0a90d235abf8ffc3e4ed3e02b57415eb2456c81570c2ef5f4fe030bf8de91ac864d125dfb1cad911cddd7cae51b56753f6787f54ff4a639ab1db19e2b145b697f8b77ffb8db01bd4424e05e6cbf16981148696721bacd83dcc51cc0e09d1fcf0914df94077157fcf4b57c058fc13f9eb24abfce4a36643117224395b4c7cfcbc20bee04ad208a8aba95ba3b7d645c4973b8583ba8107d81263235a791