www.daitauha.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5e:36:fa:ba:85:79:24:43:75:ae:b7:0d:73:f0:62:56:da was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.daitauha.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:36:fa:ba:85:79:24:43:75:ae:b7:0d:73:f0:62:56:da
Serial Number (int): 293396480454938998089168007400582904174298
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:aa:31:07:6c:05:38:bc:7a:72:44:6e:7c:dd:04:67:df:3b:eb:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:d2:6f:ef:d4:85:97:2a:3f:45:6a:15:af:71:1a:63:73:e1:8c:ce
Fingerprint (sha256): 20:46:82:dc:ff:51:f2:91:45:c5:63:b1:57:be:f2:82:de:66:b5:56:2a:11:d0:d1:8f:c9:5b:8b:ea:60:65:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.daitauha.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.daitauha.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daitauha.fr
mathieu.daitauha.fr
www.daitauha.fr

Other certificates including the domain name daitauha.fr

(limited to 100 certificates)
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
xmpp.toniob.net
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
xmpp.toniob.net
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr

Certificate

The complete raw certificate details for www.daitauha.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293396480454938998089168007400582904174298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 22:51:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 22:51:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.daitauha.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837661426513962408869300643369108047916161290315760486222749076522117636152877867981927768221853820183010418107618643353697427152386446576437136387241049606994830090761690142820778070856161018369094246830756324370185109545538850358318689369545849050925395424586210235993953974398310279423429006363601698456408779914526422795249281132108954439105334011247308864613738450572448360785202050297188960611538039511763488216171918458097600852051818536306405523811504980855579946778059681005704199555451467372812360485018059926884008980571507781224881663047371662185089839372962931973364426868243298500675740546186650102604718845810889674373177639997304290158263212578356437538886322703885096451276815105363645557910183348716720857256688379782757085073612064476902540918271504421214354714598615768132670473464879524126215476038241277759427536939104126039947669130987276731468255144821079514493656018597620806809297588818515333787721395749721311239258138461257128823358816688748017994622952346520974747474528389375470984059232118915150575267366186657645673461970133140054468599674261678583591911659335013853390141855042836794871871021285140473446215264826438702352828578814069447111575704093542355701480907214457305190172940138459251583504603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7aa31076c0538bc7a72446e7cdd0467df3bebdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daitauha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathieu.daitauha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daitauha.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001684ec6a3160000040300473045022100f6c5e1cb54d98134713f3114579e1ab0d0eeaa7adefbdc385fe3c69b20bc3a60022078c2103ecec45d97a2ca1bb539d0a96f0e67136206bccd5b5311d81fdc48aeb6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001684ec6a31b000004030047304502200ae111bdd5c2e0f797bdea53f1407f8d3d5895025f852b7a892220be122781af02210081570508489ee724f934a5916720eab979013c604cc11d5502b0f0b372cd6fdc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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