dsi.epita.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:7b:f1:0d:66:65:05:86:7b:45:7c:86:e5:7b:52:ab:1b:15 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dsi.epita.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:7b:f1:0d:66:65:05:86:7b:45:7c:86:e5:7b:52:ab:1b:15
Serial Number (int): 303512002450209030613648655890583657323285
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:c2:2c:04:4a:32:d5:43:a3:26:5f:ea:1b:cd:87:a5:b2:e6:df:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 97:87:76:87:a6:38:e0:73:81:e4:a8:2f:b1:c3:0d:0c:3c:b2:92:c9
Fingerprint (sha256): 1e:ac:0e:f7:35:46:7a:39:5a:7e:5c:8c:70:4d:70:f1:49:65:d0:c2:14:b1:df:15:22:0e:c4:41:48:2f:1b:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dsi.epita.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dsi.epita.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsi.epita.fr

Other certificates including the domain name epita.fr

(limited to 100 certificates)
git.acu.epita.fr
web.epita.fr
lse.epita.fr
lse.epita.fr
lse.epita.fr
tips.assistants.epita.fr
sigl.epita.fr
lists.lrde.epita.fr
acu.epita.fr
synergie.epita.fr
gitlab.cri.epita.fr
tips.assistants.epita.fr
epita.net
assistants.epita.fr
toulouse.epita.fr
owncloud.srs.epita.fr
acu.epita.fr
wiki-prog.infoprepa.epita.fr
scrooge.acu.epita.fr
intra.tcom.epita.fr
lama-corp.space
srs.epita.fr
cri.epita.fr
cri.epita.fr
git.srs.epita.fr
srs.epita.fr
acu.epita.fr
static.acu.epita.fr
intra.acu.epita.fr
intrachievement.acu.epita.fr
logement.epita.fr
epita.fr
algo-share.infoprepa.epita.fr
static.acu.epita.fr
git.srs.epita.fr
tips.acu.epita.fr
assistants.epita.fr
bubuntu.net
mail.mti.epita.fr
lama-corp.space
lists.lrde.epita.fr
fic.srs.epita.fr
assignments.lrde.epita.fr
www.lse.epita.fr
lists.lrde.epita.fr
algo-td.infoprepa.epita.fr
synergie.epita.fr
lse.epita.fr
chronos.mti.epita.fr
infoprepa.epita.fr
algo.infoprepa.epita.fr
www.lrde.epita.fr
wiki-prog.infoprepa.epita.fr
web.epita.fr
teamcity.lrde.epita.fr
pantheon.acdc.epita.fr
chronos.mti.epita.fr
rendu.infoprepa.epita.fr
synergie.epita.fr
tickets.cri.epita.fr
keycloak.assistants.epita.fr
intra.tcom.epita.fr
chronos.mti.epita.fr
intrachievement.acu.epita.fr
wiki-root.mti.epita.fr
srs.epita.fr
tcom.epita.fr
lse.epita.fr
lse.epita.fr
lists.lrde.epita.fr
defenses.assistants.epita.fr
www.lrde.epita.fr
tcom.epita.fr
assistants.epita.fr
gitlab.lrde.epita.fr
gitlab.lrde.epita.fr
intra-defenses.acu.epita.fr
lists.lrde.epita.fr
tcom.epita.fr
lse.epita.fr
fic.srs.epita.fr
git.srs.epita.fr
cri.epita.fr
lse.epita.fr
assistants.epita.fr
assistants.epita.fr
algo.infoprepa.epita.fr
tcom.epita.fr
sigl.epita.fr
gitlab.srs.epita.fr
prospect.epita.fr
gitlab.lrde.epita.fr
static.acu.epita.fr
photos.cri.epita.fr
git.acu.epita.fr
photos.cri.epita.fr
sni.cloudflaressl.com
chronos.mti.epita.fr
dsi.epita.fr
nas.tcom.epita.fr

Certificate

The complete raw certificate details for dsi.epita.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3HYqBb8u9fEoi90AfE/X
lNbGEd6A0WNUdGP0AejUmInAEff2JoKfR74VCYvylGjPEgJkAVBhUJ24+e9P+6Qc
ex9lT1Nrl97hT3QuO5iRWRZiKQQXQgxdT8Rjoq2hLme3/n/tWZLvPAfCNH7rGp40
nRWZnKSqpeBXAxZC6ImuKuzpOOk7a7ZS2k+CePiiZ2ojvwj4pb2aBko1fTI4E2Z5
8plC72AFrJguWwsDgXuOJ8A3Qr8cr6PlOEzpdrNjmtMLlzvrgXEiB0WjRJdJMbls
W0o+fmuc3I/AoylmIaFL0GNbhl5dZbEsnl5eAARZkAV+di3F/6DU5lkN5yG7pXaf
m4PxhMQ7JjBaQPHsNf+WTGHNay/Aj07M/+dbP2D7KtKCXffXWh+ZZelpYUnkwBOl
1WSlf2GMKQ9N5cb+iLUMYG46AlrBhpUmBt9m8LJXDzpKrftnr0zFvwrL4Wpi9iDh
zNNg9ZIciIzh3CR96qPSCc6vLz1mjNigqqFt20GEgGtbsdeNs7iiukuDZ1rQA1LK
IDUhnuGuFZ6x5i+RYX9RJs5OAkSYvVOv9oOWYB+aN74J5gI93szHVyYjL0Wgimsa
OHiB+TDzSTYReIh5BvNZ4tbGYU+tyoyCzDp1Oiw1HbXuLcqlXZIoE+7xUsIzd8p9
RI5Q7Cb1C6Z4PkLSqZi6pccCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303512002450209030613648655890583657323285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 05:24:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 05:24:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dsi.epita.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899404771817446247247341381519792393923169778323953810571579737703475658857818411230240573627094544749240577439809623666635521801668927171925464052869597720757398017792717927219684573539777497858771353936948019574939561679474955074382002657874654016561335519887444582843804462142376639955526071689495318619270909037770766215379009192166083575031088778587632905964352343248464826141297447358750773303274487938083197406945817151865748493765640717359931278302777334676669801499402569777635720275338091176623631361603231583857237349385280689207579620019684900679601994790281514867006523249127008937394170670891888217963101528328434831430912109504698559208055554075674915871094178204429045596069499179859920651253683848388733277097363222645082699437784308928994597902619926990968898927937952516040425610212447984776909264602382963235314925364811808558885910958747120755953270790978277694533140246061538890396185613075038869727995657963831634754021271521940790013164303634913841678828606874092849940110522854535233170721224008273573926722803427245672264444601249971378687191034493321620001064005568602893905109191443705823985562764646868018183997548906506881792887907819258678150655007166231512947790170564000569853999772076091616028960199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ec22c044a32d543a3265fea1bcd87a5b2e6df45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsi.epita.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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