shop-dev.kinepolis.fr

Issued by R3

About this certificate

This digital certificate with serial number 04:9f:40:03:89:8f:71:26:74:0c:10:9a:d7:da:04:da:76:1e was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop-dev.kinepolis.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9f:40:03:89:8f:71:26:74:0c:10:9a:d7:da:04:da:76:1e
Serial Number (int): 402639129026145773730647564988199238006302
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:f4:b0:08:ab:bf:69:6e:44:69:58:ea:a8:0b:80:1a:fe:d9:2c:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:21:82:54:e6:ff:f1:05:a5:5a:1d:52:af:ee:64:ff:d0:9e:ae:d1
Fingerprint (sha256): 19:72:a6:16:a3:99:d6:4f:ed:36:d9:71:c1:11:1d:00:2c:17:ed:31:2d:39:12:f2:44:f4:39:19:f4:24:36:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop-dev.kinepolis.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop-dev.kinepolis.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop-dev.kinepolis.be
shop-dev.kinepolis.es
shop-dev.kinepolis.fr
shop-dev.kinepolis.lu

Other certificates including the domain name kinepolis.fr

(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
kinepolis.biz
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
tickets.kinepolis.be
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.biz
kinepolis.fr
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.megatix.be
*.kinepolis.fr
tickets.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
shop.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.lu
*.kinepolis.fr
shop.kinepolis.be
kinepolis.biz
kinepolis.biz
kinepolis.biz
kinepolis.fr
kinepolis.lu
shop.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
shop.kinepolis.be
shop-dev.kinepolis.be
kinepolis.megatix.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
tickets.kinepolis.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
www.kinepolis.fr
shop.kinepolis.be
kinepolis.fr
tickets.kinepolis.be
kinepolis.biz
*.kinepolis.fr
*.kinepolis.fr
kinepolis.biz
kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
www.kinepolis.fr
kinepolis.megatix.be
kinepolis.megatix.be
shop-dev.kinepolis.fr
kinepolis.megatix.be
shop-dev.kinepolis.be
*.kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.fr
tickets.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.biz
shop-dev.kinepolis.fr
kinepolis.fr
kinepolis.biz
kinepolis.biz
shop.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
kinepolis.lu
kinepolis.biz
shop-dev.kinepolis.fr
kinepolis.biz
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.biz
kinepolis.biz
kinepolis.fr

Certificate

The complete raw certificate details for shop-dev.kinepolis.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402639129026145773730647564988199238006302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-23 08:21:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-23 08:21:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop-dev.kinepolis.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827721172987825878762062499669991981376792221022450043422848899669686098583390572029734442128419082441780709416120093513419965428596107552429965085471640908520142199617805404391754362360000672671211919655078689346848858069448839446503792765099609993877903692555658804886393375094167891008765452203984412555538145523548305699520194640108864632488234349323945323010361759977281938299951073873850608399945813139693481908718957211148251114956324705364980344080666821312831771179598477740469764591418883722286671369448985721414451143326227642264883361262186154393360938745235171622740380278785943135606171729644740910759851045069410842507253160858633021629286740640309018926471236630548565799409699745699123037941163548714263036532505354556378189160643912810904952512603618891495286752670870631957766765178934559088196320817995302283297073515161251498033570648149338385077096658150761267814102299242089830170359554254938659870628408504806658622580406084523156191470946015742931755593898550888977818745400580212722063651712520464334897656831978790943658131457534126818961309956388061672823298594632137938449821222556315435671761272508771239722646037596051971326030492146814399369992142103390321410865260506817995112303845286750034858782021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62f4b008abbf696e446958eaa80b801afed92c91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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