cri.epita.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:14:e2:c2:45:74:99:b1:47:90:43:fa:c2:bf:d3:92:d4 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cri.epita.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:14:e2:c2:45:74:99:b1:47:90:43:fa:c2:bf:d3:92:d4
Serial Number (int): 305601327454298759764489481838300782367444
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 69:13:55:94:83:df:df:22:24:5d:a3:1e:e7:fb:aa:81:6d:1c:b1:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:f1:e1:15:f5:27:24:85:14:b5:59:51:56:06:83:0f:4e:35:41:d2
Fingerprint (sha256): 13:42:a5:29:96:1f:52:70:73:eb:be:17:c3:1d:1f:43:97:96:28:a6:43:ca:a3:26:1a:a9:b5:a0:f3:71:70:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate cri.epita.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cri.epita.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounts.cri.epita.net
cri.epita.net
doc.cri.epita.net
gitlab-int.cri.epita.net
news.cri.epita.net
tickets.cri.epita.net
wiki.cri.epita.net
www.cri.epita.net

Other certificates including the domain name epita.net

(limited to 100 certificates)
inge-etud.epita.net
intra.cri.epita.net
inge-etud.epita.net
absences.epita.net
apply.epita.net
cri.epita.net
epita.net
doc.cri.epita.net
inge-etud.epita.net
www.epita.net
acdc.cri.epita.net
inge-etud.epita.net
acdc.cri.epita.net
intra.cri.epita.net
inge-etud.epita.net
cri.epita.fr
epita.net
absences.epita.net
inge-etud.epita.net
apprentissage.epita.net
absences.epita.net
intra.cri.epita.net
cri.epita.net
accounts.cri.epita.net
cri.epita.net
sup-sub.cri.epita.net
inge-etud.epita.net
apply.epita.net
cri.epita.net
tickets.cri.epita.fr
apprentissage.epita.net
auth.pie.cri.epita.net
inge-etud.epita.net
accounts.cri.epita.net
cri.epita.fr
photos.cri.epita.net
photos.cri.epita.fr
photos.cri.epita.fr
acdc.cri.epita.net
photos.cri.epita.fr
epita.net
photos.cri.epita.fr
doc.cri.epita.net
doc.cri.epita.fr
absences.epita.net
doc.cri.epita.net
absences.epita.net
epita.net
inge-etud.epita.net
sup-sub.cri.epita.net
accounts.cri.epita.net
static.cri.epita.fr
apply.epita.net
doc.cri.epita.net
epita.net
auth-2.pie.cri.epita.net
www.epita.net
cri.epita.net
doc.cri.epita.fr
inge-etud.epita.net
inge-etud.epita.net
cri.epita.fr
apply.epita.net
www.epita.net
doc.cri.epita.fr
absences.epita.net
acdc.epita.fr
sup-sub.cri.epita.net
sup-sub.cri.epita.net
photos.cri.epita.fr
doc.cri.epita.fr
acdc.epita.fr
epita.net
accounts.cri.epita.net
ipxe.pie.cri.epita.fr
acdc.cri.epita.net
doc.cri.epita.net
apply.epita.net
www.epita.net
doc.cri.epita.fr
tickets.cri.epita.fr
doc.cri.epita.fr
www.epita.net
tickets.cri.epita.fr
tickets.cri.epita.fr
cri.epita.net
auth.pie.cri.epita.net
static.cri.epita.fr
apply.epita.net
grafana.cri.epita.net
v2ssl.webservices.chronos.epita.net
photos.cri.epita.fr
doc.cri.epita.net
accounts.cri.epita.net
apply.epita.net
www.epita.net
acdc.cri.epita.net
photos.cri.epita.net
cri.epita.net
www.epita.net

Certificate

The complete raw certificate details for cri.epita.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305601327454298759764489481838300782367444
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-29 12:25:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-28 12:25:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cri.epita.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698681296808690012700335941702001032612777389844403208280587326453294981439083279580108949093833393774311566401408279160167978973781143985533349349757001913081456631641486712781435164755138143107772655142187401815281994220948751256486106988903184804252144104095572572266312416180442831110490196534390180206523574280690333520556339249192129563540639076413601413393271778924647284043151288071561855666902419217869795955016999323030087248725097323645339054729474042936511550931817948673476423825928002126993197655554959466309733282119230024668242308422246283338714289369517366756705667594086165123595164695081901987802586809743484550068041618706646058168517160692981705520928012624780779518409539681773554604391309418557443548323979335384640891541828121372462613627240127672803340213541241850160269637114785210371703290967380948894893836340187592701310486338241989466135282673590576573252655684194668925076674555407280103406816143866173283853497303250220916165847177756360398516892904185578333475614283378797700439811628323290595942874427784974047150708652279285439314495506928557222044897525790533205275712607780328500711880231528626682107552932858242544896617026677419647533618805037783643906671412427425641017137230647456065364366657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6913559483dfdf22245da31ee7fbaa816d1cb147
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-int.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cri.epita.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00070aa084e4177a3e90acb6965d365bd094d6b4ac7d6c4f20e4b1ae82a4d399452b1af6f70e5b59258a0617ec358f4244ea444bf0cc0b4d977249961b5ee8c1481b9d65b36d7c575d54301466a39008fd08884f9dd54e524bddc7ab4ff19739f4eabb4a197dda3610fd7912b0587c409d0b41c0fb260667268a21984df4d4e31bcef2c763edcb7e9fd9991744129e37f99a8cf60dc3861279ed6c6212c912760d4047888f295a07fcbc8bb90b966a69964c6893b4e644f3e088ef28405ad92641cf9090531c8689e88de86e96481a1b27ffd6f6123cb4cc26b1139d25daed153a990c01c9ebf52b85378e4da7c1ef59170155578127d653cfdd6eb36fae06cd62