shop-dev.kinepolis.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:93:3c:b9:57:37:ca:3f:5a:75:c8:ad:ff:0d:f3:30:0c:3a was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop-dev.kinepolis.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:3c:b9:57:37:ca:3f:5a:75:c8:ad:ff:0d:f3:30:0c:3a
Serial Number (int): 311439081756314394981949398251387854261306
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f3:ed:7e:04:f3:44:eb:4a:aa:8e:df:8d:df:95:14:b7:0f:19:9f:e0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:a1:eb:ae:9e:99:5b:03:81:35:36:6e:76:e8:d5:73:43:3b:b9:be
Fingerprint (sha256): 19:60:22:40:7e:4a:2c:a8:da:2a:b0:f1:80:ff:0b:41:9e:22:59:19:b7:22:6c:a1:13:47:15:e1:b9:dd:e7:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop-dev.kinepolis.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop-dev.kinepolis.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop-dev.kinepolis.be
shop-dev.kinepolis.es
shop-dev.kinepolis.fr
shop-dev.kinepolis.lu

Other certificates including the domain name kinepolis.fr

(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
kinepolis.biz
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
tickets.kinepolis.be
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.biz
kinepolis.fr
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.megatix.be
*.kinepolis.fr
tickets.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
shop.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.lu
*.kinepolis.fr
shop.kinepolis.be
kinepolis.biz
kinepolis.biz
kinepolis.biz
kinepolis.fr
kinepolis.lu
shop.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
shop.kinepolis.be
shop-dev.kinepolis.be
kinepolis.megatix.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
tickets.kinepolis.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
www.kinepolis.fr
shop.kinepolis.be
kinepolis.fr
tickets.kinepolis.be
kinepolis.biz
*.kinepolis.fr
*.kinepolis.fr
kinepolis.biz
kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
www.kinepolis.fr
kinepolis.megatix.be
kinepolis.megatix.be
shop-dev.kinepolis.fr
kinepolis.megatix.be
shop-dev.kinepolis.be
*.kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.fr
tickets.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.biz
shop-dev.kinepolis.fr
kinepolis.fr
kinepolis.biz
kinepolis.biz
shop.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
kinepolis.lu
kinepolis.biz
shop-dev.kinepolis.fr
kinepolis.biz
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.biz
kinepolis.biz
kinepolis.fr

Certificate

The complete raw certificate details for shop-dev.kinepolis.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311439081756314394981949398251387854261306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-28 08:21:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-26 08:21:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop-dev.kinepolis.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 657206179872171909389688376411513822514955346220173511378171655927194667366992606546191600529108646402156409268997264409907145870302986977393704402907729870226839852575478261597013600721692970107961884732744040648920924840855281984748836315211917926631472912626525273978422158423814160156732391142319145446589013416099728253090975039399695616723173277593676665706538506904917223150738224188054877736096067594417771050353231914333122076539418714750716543513547894877476653738131099224654882369553417697255327601057471733488348349782876621524445182958644063524246782007682308074401286359691724295246573932606217091446378491940260805551952736087583633844481967589324639573297182029745585852226970864043112513554947623323278209043924382944461529912859253265990166062035704504250200850942447490227189213384929567227482697250161304446162245980221247863839031615678307289718673944825047950518711156012680379671382085645453222630650735435292746417499790517613781900155367378268915868639817199641026181921725441385187760317784340545159422497075009769207505926902804025816146361515574204607906309234766713267993392650021119649518569605363119371750842076091925640001130632428420974777230973705157311537177882769243627912631068370658845942291681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3ed7e04f344eb4aaa8edf8ddf9514b70f199fe0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0030b192dbcd5a7d800e8f86ba4ed2b47aa5a2687cfe49ede593bb829975e17b75201a1f3a0ffd62d0b513df7e929fc8405fc6daec42daa3194784fb88bfc00b5909f2654e9e2a2ca81a2f65559267a322556f3110ba152472a7e0c5a14c263772f70f5ee433f3a443048f10c3f426a696ae253f394f296d364a24df54a6ea0b3e57db84c34776f7e5f0332c9fc1de4dfbb8c6afba4b582ae4a525884659e8ceb2bf8042e83eea0dd303c882648082b85ff1f56796d99c56fe380d248a75ec109bdc6ffdf5c9f06a2acb3f65f82d70c487dc342e2467fb051bfc2bf6d044393cddf4a2fd4b557a470e279837b0dcedffd30fb19ffbc0cc9aa2d3f39c3978c7513e