fontenaysousbois.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f7:b9:d5:56:08:6e:be:c3:c5:60:05:8d:f5:b2:4d:1c:3d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fontenaysousbois.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f7:b9:d5:56:08:6e:be:c3:c5:60:05:8d:f5:b2:4d:1c:3dSerial Number (int): 345633617308158942955743545577020125420605
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e9:42:86:2f:6e:2f:e3:fc:ad:c1:19:14:17:c3:27:e4:d8:ae:f1:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 45:27:3d:35:2a:d0:4a:07:ab:a2:f8:7c:e3:8c:c7:03:c5:7f:3a:19
Fingerprint (sha256): 14:47:0a:29:78:91:2c:d9:a2:38:79:02:72:d7:74:52:af:f0:82:3e:14:11:3c:da:58:48:62:77:3d:62:09:74
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fontenaysousbois.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fontenaysousbois.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fontenaysousbois.org
Other certificates including the domain name fontenaysousbois.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for fontenaysousbois.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISA/e51VYIbr7DxWAFjfWyTRw9MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDMxNzQyMjhaFw0y MDA1MDMxNzQyMjhaMB8xHTAbBgNVBAMTFGZvbnRlbmF5c291c2JvaXMub3JnMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtn0jFSt7bYiOW0+DKgTV6UsF uBiHMgejmSi8dYcmxkeHYV5pDxRTxPA0vNGDlQIakSgnuxQqU960PTBetvlwX+YI XMmzW6SwKQ37Ho7IS64YoJTPpJxjVd7axbyjA8tSkO8lm73RJT3iT+zzeXABP0GW cn+irelE95ejqcCMuL4gir4i0eAXnIzEF84MeO7U66+L7fyRpqEQ9XzTcyGrt6Fr xxwubNYLFpxgmIezGZXproQv+2iqlBZqSdcloFPJQwZxhV74ZYvmywY7TJLhFbs3 ur1ZKpn26Blz0jKevO1isXWWxKhH/L64UvjU74Etr8/ebBV+w8WEQmbU48FVrdVM FjwQ9YLGL01mQ9Sw2DWUPBMXbYCHZK4FODQhK6zc1QB7s3nHaCMqKhgZJH8GkwpL n5iqAsvsSE43NFL3U5FK+MticHdvApf8Rup6xepNDpNerIttN+CGmqGkBwKukAGz 3b8+pPBgpGXjt0+9Gcxxqz2R6tGofZfHnEIxhx7swFk76B8Xi7rzaYEwYoCMZ4d/ uu23xrUQZn0/XrVqB9/InHee4WO2wkjp16CbfqxhyPobEXqXEQO7dKj9GkH/chRZ QIk9BK7dXbUh2f/rvBPAtTBwh1PdvWzyOZmeasrBXT5ZjGTrr+GqA5gKZRnBGZDj txPtHu/fNlw839nY4UsCAwEAAaOCAmowggJmMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU6UKGL24v4/ytwRkUF8Mn5Niu8SwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRmb250ZW5heXNv dXNib2lzLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisG AQQB1nkCBAIEgfYEgfMA8QB3AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaB cUVYAAABcAxca1EAAAQDAEgwRgIhAKGxNo20SOk59vJEeDuYDFzB38TmB2TADDs1 zYU7FbrxAiEAiB0NPuzOThj2HUsxegTFYUSk+pObfl8w3lvwFmMtaLMAdgCyHgXM i6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXAMXGtAAAAEAwBHMEUCIExF On+MLdfqKigGuOCDq2t/o9vS1/Gtwy7dnFtId4n4AiEA5s48IVBRYV0Z/DKuJqIs TVRDKXAIvgdQiEVn0U8YMZMwDQYJKoZIhvcNAQELBQADggEBAAyKY46C3+YXGALm Xp1oclmIXOHcM7YIJCCKK+f2AAie23TPcfMajqCMiHE35Si0nnUDFl7LavjpmNTA Qw3nCyyZxh0mc0yN4nNAJ6bo34EX601zuG0mIJ0ERaj6jYBZn6YdpydKLXKlcF8Z MqCFI3AI0ZZFifdpDW4/OHflBbTZfJMXiVQ/CVigXqhnACt+4WRAAvRbLNLrQK23 TRBL7xV1G40koXtaDO3TKpgX2kpWffOHibyB1mdSK2KN5dXUmlXkU2HN9CazHX9D 41hF4L3WpVQ1UfK191tzYzTAy+LlNunCq3MQX0c21nkASmbEay32APS04zXioH6E PMfB4Wc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtn0jFSt7bYiOW0+DKgTV 6UsFuBiHMgejmSi8dYcmxkeHYV5pDxRTxPA0vNGDlQIakSgnuxQqU960PTBetvlw X+YIXMmzW6SwKQ37Ho7IS64YoJTPpJxjVd7axbyjA8tSkO8lm73RJT3iT+zzeXAB P0GWcn+irelE95ejqcCMuL4gir4i0eAXnIzEF84MeO7U66+L7fyRpqEQ9XzTcyGr t6FrxxwubNYLFpxgmIezGZXproQv+2iqlBZqSdcloFPJQwZxhV74ZYvmywY7TJLh Fbs3ur1ZKpn26Blz0jKevO1isXWWxKhH/L64UvjU74Etr8/ebBV+w8WEQmbU48FV rdVMFjwQ9YLGL01mQ9Sw2DWUPBMXbYCHZK4FODQhK6zc1QB7s3nHaCMqKhgZJH8G kwpLn5iqAsvsSE43NFL3U5FK+MticHdvApf8Rup6xepNDpNerIttN+CGmqGkBwKu kAGz3b8+pPBgpGXjt0+9Gcxxqz2R6tGofZfHnEIxhx7swFk76B8Xi7rzaYEwYoCM Z4d/uu23xrUQZn0/XrVqB9/InHee4WO2wkjp16CbfqxhyPobEXqXEQO7dKj9GkH/ chRZQIk9BK7dXbUh2f/rvBPAtTBwh1PdvWzyOZmeasrBXT5ZjGTrr+GqA5gKZRnB GZDjtxPtHu/fNlw839nY4UsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 345633617308158942955743545577020125420605 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 17:42:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 17:42:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fontenaysousbois.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744489417997523661164946550442501380851467343181502991370226811451461949471627485932801979415010487336727821966416658419575957709591771095983101816278189095309234628690738564806132993102789204730507201633411145237143314020403151204933504487881680701777951203063055229517125717642332079026291197368070365794163446234351980013880169076238854356270154321382907154451860074737859149860011290550113098653106110406166024473909826484145557810384272320523307473626125241672645970076924806773341306027530636048683357419819459885209270258258334683949013985394736239178132485583770505176808078627653177739647242053937580935887011159932028161885289133401465933732554575073106418883335574411695061665637360819618717690256032426562389052211648192575130756874833481690408871529661708673200353267222102798542452614582382155862514434435013673123453779905498346182890482927045727831147500718347927712441616438166114409088792407398845340176181195585018815054785225758501282658249959983732579229708666479267071743920476397007718672892942470082513633421114014444492465305944436090948520519315291456620065091683810564513362886589870538909854256977946858258839750696635774243960732032900942143382104477325354171891251726700718082776836070794885932204482891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e942862f6e2fe3fcadc1191417c327e4d8aef12c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fontenaysousbois.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700c5c6b510000040300483046022100a1b1368db448e939f6f244783b980c5cc1dfc4e60764c00c3b35cd853b15baf1022100881d0d3eecce4e18f61d4b317a04c56144a4fa939b7e5f30de5bf016632d68b3007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700c5c6b40000004030047304502204c453a7f8c2dd7ea2a2806b8e083ab6b7fa3dbd2d7f1adc32edd9c5b487789f8022100e6ce3c215051615d19fc32ae26a22c4d5443297008be0750884567d14f183193 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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