br.sanofilivedetailing.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:ed:64:54:df:76:36:2b:a9:2e:30:fa:ec:80:28:fb:27 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=br.sanofilivedetailing.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:ed:64:54:df:76:36:2b:a9:2e:30:fa:ec:80:28:fb:27
Serial Number (int): 289895842235832382618729873998238433475367
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:67:ee:d1:55:c5:58:ba:12:1c:b3:a4:27:5c:a3:55:34:9c:dc:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:42:04:fd:dd:29:82:64:d4:6c:c1:4b:2a:c0:3a:52:33:0e:b9:2c
Fingerprint (sha256): 29:02:aa:67:4d:4d:33:00:2e:a8:5a:b3:83:3f:1d:58:0f:00:c9:24:58:dc:7e:82:c0:c5:17:97:c7:20:20:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate br.sanofilivedetailing.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for br.sanofilivedetailing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

br-training.sanofilivedetailing.com
br.sanofilivedetailing.com
co-training.sanofilivedetailing.com
co.sanofilivedetailing.com
latam.sanofilivedetailing.com
mx-training.sanofilivedetailing.com
mx.sanofilivedetailing.com
training-latam.sanofilivedetailing.com
www.contactomulticanal.com
www.ipsenlatam.com
www.lorealcosmeticaativaonline.com
www.lrp-edet.com

Other certificates including the domain name sanofilivedetailing.com

(limited to 100 certificates)
pamusv001d.kadrige.com
*.sanofilivedetailing.com
demo.sanofilivedetailing.com
benelux.sanofilivedetailing.com
sni161979.cloudflaressl.com
sni228335.cloudflaressl.com
pamusv001d.kadrige.com
benelux.sanofilivedetailing.com
sni226889.cloudflaressl.com
benelux-training.sanofilivedetailing.com
benelux.sanofilivedetailing.com
sni161979.cloudflaressl.com
pamusv001d.kadrige.com
demo.sanofilivedetailing.com
pamusv001d.kadrige.com
benelux.sanofilivedetailing.com
br.sanofilivedetailing.com
demo.sanofilivedetailing.com
agencies10.kadrige.com
sni226889.cloudflaressl.com
pamusv001d.kadrige.com
benelux-training.sanofilivedetailing.com
pamusv001d.kadrige.com
pamde037d.kadrige.com
br.sanofilivedetailing.com
benelux.sanofilivedetailing.com
benelux.sanofilivedetailing.com
pamusv001d.kadrige.com
benelux.sanofilivedetailing.com
pambr007d.kadrige.com
benelux.sanofilivedetailing.com
benelux.sanofilivedetailing.com
pamusv001d.kadrige.com
benelux.sanofilivedetailing.com
demo.sanofilivedetailing.com
*.sanofilivedetailing.com
pambr001d.kadrige.com
pamusv001d.kadrige.com
benelux.sanofilivedetailing.com
benelux.sanofilivedetailing.com
*.sanofilivedetailing.com
benelux.sanofilivedetailing.com
pamde015d.kadrige.com
benelux-training.sanofilivedetailing.com
demo.sanofilivedetailing.com
pamusv001d.kadrige.com
demo.sanofilivedetailing.com
pamusv001d.kadrige.com
pambr001d.kadrige.com
pamusv001d.kadrige.com
pamusv001d.kadrige.com
pamusv001d.kadrige.com
demo.sanofilivedetailing.com
pamusv001d.kadrige.com
pamusv001d.kadrige.com
dz.sanofilivedetailing.com
br.sanofilivedetailing.com
pamusv001d.kadrige.com
*.sanofilivedetailing.com
pamde015d.kadrige.com
pamusv001d.kadrige.com
pambr001d.kadrige.com
benelux.sanofilivedetailing.com
pamusv001d.kadrige.com
demo.sanofilivedetailing.com
pambr007d.kadrige.com
pambr001d.kadrige.com
demo.sanofilivedetailing.com
pamusv001d.kadrige.com
benelux.sanofilivedetailing.com
benelux.sanofilivedetailing.com
pamusv001d.kadrige.com
benelux.sanofilivedetailing.com
benelux-training.sanofilivedetailing.com
*.sanofilivedetailing.com
pamusv001d.kadrige.com
br.sanofilivedetailing.com
pamusv001d.kadrige.com
pamusv001d.kadrige.com
sni228335.cloudflaressl.com

Certificate

The complete raw certificate details for br.sanofilivedetailing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/+3Vp7HzfISO5x8Al+5
RCUiY12FYmsXOw7qfOV1/oG159SEqQst3D4fgSHHKYnHsXqedZQgd4/R7qRj5QEI
g0AxEonSWGi/WvjVC8ISFA4yqp61UwUNFd0dOEttLFcgoeMSuBv1dM21SNzA3q5H
6eYltH0r8aiBi0cue/sF7V5b7KiVtheiOOQ3RbCc09+HvPc5O8uG4wyhpn+c/4J5
fA3hIbtDmOw3GD/Z3mYgzIY5t8L1WIvYF+mVYAYq5hBxkD97RkHMYy4ON0JXoMK+
d0KNkPjpcpECadtqMrKhVpOaR8r5+we3+BRgw8S0jnn7iL4W08cKpZtzm+jWdGng
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289895842235832382618729873998238433475367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-10 07:33:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-08 07:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'br.sanofilivedetailing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24237614589459939409765882957570107745095025158988234530964300301481435093840222700125318519541733051250264750906737830186009727483297959187807801018697030665587837754032751967807547120254906851258499067357995110165726660785657456129988369873180862995533666737651069651299819133324759620198805520732993521465722630274960405625898685463958836370776347614241939305618313285457037014907771276650911143925917202409909210119926657684269123466262923151110470600911365226439603429605036790663727402885769568102753496994034185319283087088809381217512661260553446969032402495102659767857652931939141621600645028751807512961203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1367eed155c558ba121cb3a4275ca355349cdc86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (372 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br-training.sanofilivedetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.sanofilivedetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co-training.sanofilivedetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.sanofilivedetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latam.sanofilivedetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx-training.sanofilivedetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.sanofilivedetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training-latam.sanofilivedetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contactomulticanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipsenlatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorealcosmeticaativaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrp-edet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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