amitol.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:a5:c2:0b:e3:e6:ed:05:7f:5c:d8:01:74:b9:74:9d:25 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=amitol.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:a5:c2:0b:e3:e6:ed:05:7f:5c:d8:01:74:b9:74:9d:25
Serial Number (int): 281293565242753004320882285160506651352357
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 93:3d:1a:c6:4f:9a:f0:b7:e0:4d:a1:07:6a:c5:5b:51:e9:06:23:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:22:e2:39:06:3f:72:08:52:22:98:f4:64:58:bc:07:d8:85:36:5b
Fingerprint (sha256): 1a:f6:5f:fe:f6:b0:b9:72:4d:0d:d9:cd:d0:70:98:fd:2e:c5:37:ca:81:28:ee:77:91:ac:79:94:12:10:9f:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate amitol.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amitol.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amitol.fr
www.amitol.fr

Other certificates including the domain name amitol.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for amitol.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281293565242753004320882285160506651352357
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 02:01:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 02:01:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amitol.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 888648318071034352232020879809478699295709778814324184713992805999694374646125246678713253873289992945521121566485299715214914612205377997604558036824541314719042977948906661009045785781681329665954132154007804471593271877067059744474173650350392171650278383542358402929560059985466045168162689246258252626105779386922835446626794100836789775127428402489229607392935173404096459261464612214578230555684058210079805481118422643282798322445860464488215176703447901252197653702801520650759647705107554696279705210089414419268874692424254132498852371765863038212284580359526276445894837523614487634652553593071359414284301277677157864791036357632496179464822428433652715744000635819357921384815756895414145502531808570996222729503889806789121983793326638616797244694958948136003464411428663344809426118711144582375946660170748002924767551816060876536419803054909774038222425345202589717832854321196428643472995165078715066772180852495715514299610575984124654266327291653009294275474823034940172787045403066521173560400051276892874158233992206332709701083440811231936785157000462546040203159925847644740207209702695197815272165893718576940091895386382580864890132959321966912632421681343411379616724520584619359406176746283114417024562167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							933d1ac64f9af0b7e04da1076ac55b51e9062371
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amitol.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitol.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017105562f8200000403004730450221008f958c887a9fefc599752056c0fbd7b2bf16c99d6917195a25b1975cf43963a1022011e024d01bd492f73ae6cb485587724cbe7ba4a4d95b18fc2417fa30be0fef410075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001710556315300000403004630440220641f7c0d1b6898425ccedf79534e1a8d535253005d6e3fc1e25d7935cce1c4aa02201d22f4f91bb1d39abc64fb2c31e145b705a913be511e3f03988a19fb24b131aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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