marathonpourtous.paris2024.org

Issued by R3

About this certificate

This digital certificate with serial number 03:7b:4e:b7:5b:3f:6f:38:1f:66:f6:19:cc:e2:44:7b:71:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=marathonpourtous.paris2024.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:4e:b7:5b:3f:6f:38:1f:66:f6:19:cc:e2:44:7b:71:8b
Serial Number (int): 303296220751277575112338685117448268247435
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:ba:c1:d4:8f:38:94:96:66:54:85:e8:87:9e:31:84:58:11:67:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 83:7d:cb:ad:6e:f5:2a:8e:ef:0b:92:47:68:b4:12:ad:b4:ea:87:f8
Fingerprint (sha256): 28:56:3b:eb:2a:2c:e2:2d:0b:fa:c9:2d:0a:d4:36:4e:a2:86:90:73:62:72:1d:88:82:3a:d4:27:58:85:4d:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate marathonpourtous.paris2024.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marathonpourtous.paris2024.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marathonpourtous.paris2024.org

Other certificates including the domain name paris2024.org

(limited to 100 certificates)
concertation.paris2024.org
mulesoft-tkt.paris2024.org
*.paris2024.org
medical.paris2024.org
actualites.wiztopic.com
bo-cms-sbp.ew.paris2024.org
paris2024.org
oms.paris2024.org
api.academie.paris2024.org
actualites.wiztopic.com
actualites.wiztopic.com
ensembleonfaitlesjeux.paris2024.org
celebrations-pp.paris2024.org
image.email.novartis.es
www.terredejeux.paris2024.org
spectrum-booking-portal.paris2024.org
cert00033-azurecdn.akamaized.net
alerte.paris2024.org
bo.ew-dev.paris2024.org
concertation.paris2024.org
marathonpourtous.paris2024.org
*.paris2024.org
communautemarathonpourtous.paris2024.org
boutique-heritage.paris2024.org
registrations.marathonpourtous.paris2024.org
vdp.paris2024.org
rejoindre.paris2024.org
iextranet.oodrive.paris2024.org
ctp.paris2024.org
pressoperations.paris2024.org
spectrum-booking-portal-dev.paris2024.org
vdp.paris2024.org
image.email.novartis.es
boutique-terredejeux.paris2024.org
api.centredepreparation.paris2024.org
orah.paris2024.org
questionnaire-volontaire.paris2024.org
delegation-pp.paris2024.org
hospitalityguestregistration.paris2024.org
joly.paris2024.org
actualites.wiztopic.com
concertation.paris2024.org
waiting.paris2024.org
projet93.paris2024.org
ctp.paris2024.org
delegation.paris2024.org
tickets.paris2024.org
gigya.celebrations.paris2024.org
corporatehospitality.paris2024.org
data-accompagnement-impact.paris2024.org
actualites.wiztopic.com
actualites.wiztopic.com
aap-impact.paris2024.org
www.boutique-celebrations.paris2024.org
sslcertificate7.queue-it.net
shop.paris2024.org
bo.spectrum-booking-portal.cms.paris2024.org
san-2-s50.tlsprovisioning.exacttarget.com
shop.paris2024.org
t.tickets.paris2024.org
t.tickets.paris2024.org
api.centredepreparation.paris2024.org
vdp.paris2024.org
actualites.wiztopic.com
vdp.paris2024.org
cominterne.paris2024.org
marathonpourtous.paris2024.org
marathonpourtous.paris2024.org
hrpaccount.paris2024.org
api.academie.paris2024.org
reglementmptc.paris2024.org
actualites.wiztopic.com
revealrelais.paris2024.org
de.newsletter.events.renault.com
marathonpourtous.paris2024.org
waiting.paris2024.org
api.centredepreparation.paris2024.org
marathonpourtous.paris2024.org
hospitalitytravelpackages.paris2024.org
exploreterredejeux.paris2024.org
spectrum-booking-portal.paris2024.org
actualites.wiztopic.com
concertation.paris2024.org
marathonpourtous.paris2024.org
tickets.paris2024.org
cert00033-azurecdn.akamaized.net
shop.paris2024.org
api.spectrum-booking-portal.cms-dev.paris2024.org
medical-back-pp.paris2024.org
centredepreparation.paris2024.org
concertation.paris2024.org
objets.paris2024.org
alerte.paris2024.org
www.terredejeux.paris2024.org
revealrelais.paris2024.org
spectrum-booking-portal.paris2024.org
actualites.wiztopic.com
cost-tool-preprod.paris2024.org
offline-mediatheque.paris2024.org
data-accompagnement-impact.paris2024.org

Certificate

The complete raw certificate details for marathonpourtous.paris2024.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNzwXF9MEpiyHQQyWcqH
qVZ57X08AleG2RWRRrgOT+km4vTCeAzF1RozhB5HmVsJKej7+pPEeTJL7FB8c/LA
J5wg6e1ki3TH9dapkFxWVEa63bVGQrkP3+0M7NzVPrHwJ2DA3lHQijYUTNWiGeMR
ygs1YtkE6L322jjQRFZ6AMQhngMmhe0QQ6RJht1buJFxqvbgdZZ+h1ghql60Om/r
qw/o1jplF7aG28c9xK0ehLqOnwiZsemngMnA9+kMc1+qyV/gK+4aiYVb/WK1hLZP
foXV75nrQnko++YTwPZMImMxQqOpjgTzuY1RGk8p9UyVCAAqSBzJJN2nKLc4pA5N
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303296220751277575112338685117448268247435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 13:24:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 13:24:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marathonpourtous.paris2024.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20812031051288726835904407529524534346225878033140926675124953213962863555484488017917413693983762851588340137839185921829206683441543295486556048862544646576638920644042059797814707837302565660507482362803908385994531913143624453891804921508060691493106568416050839174554084822842983705151798085467767320763189359431998208195259276753383325152623720156332408075444620915110182918441343878143730293900041126290566401126606613999817256210801117452205430248974483478134393337914948536558151633428314175119054337984775097069643329818432895984456618595080802778766336362054877582480626162071672174052296722559999211883991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32bac1d48f389496665485e8879e3184581167a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marathonpourtous.paris2024.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1cf5e86d000004030046304402201994e91d545b3cf953e76f61d8e9a44b32c75906c5402c18e404f91fb737b20902205092f2515a875ef150f07c0e17b6d81c81d29f0d5333a35acfec9d71d69f085f0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d1cf5e86a0000040300483046022100e7c089463467f31729958d417fcee39c34c04ca48b65513f3e730e47bb94b633022100945cb25b61c8f1138f82b3a4eee307dd124fb0ff0ef319cfd4e8022ed06c896a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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