agilerennes.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:62:97:68:f5:5f:58:1c:6e:b0:36:ab:40:52:68:5f:fc:48 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=agilerennes.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:62:97:68:f5:5f:58:1c:6e:b0:36:ab:40:52:68:5f:fc:48Serial Number (int): 294885788156513816665176724973415357742152
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7c:52:6a:1e:30:03:63:4f:88:d1:ea:4b:30:6f:4f:7a:c4:ce:0b:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7b:da:0e:27:99:4a:46:2e:23:13:6e:83:70:88:0c:d1:cd:25:18:91
Fingerprint (sha256): 2a:bd:30:b5:6d:ad:71:41:d2:74:fe:94:ba:3b:c3:06:86:68:fd:c4:e0:20:32:ae:3a:18:06:d1:f7:eb:78:67
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate agilerennes.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for agilerennes.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
agilerennes.org
agiletour.agilerennes.org
www.agilerennes.org
agiletour.agilerennes.org
www.agilerennes.org
Other certificates including the domain name agilerennes.org
(limited to 100 certificates)
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agiletour.agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
www.agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agiletour.agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
www.agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
agilerennes.org
Certificate
The complete raw certificate details for agilerennes.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgISA2KXaPVfWBxusDarQFJoX/xIMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA3MjgwMzU2MDBaFw0x NjEwMjYwMzU2MDBaMBoxGDAWBgNVBAMTD2FnaWxlcmVubmVzLm9yZzCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAJzUQC874X4tVG19ENk6+hL4DmpLsW6Q tOLurd9SCIMw+wnaHTy4HWGw3+6f4Ro9cLR67AYVcQoWp49CciXYi96ELEWh9hx5 AQksvRXhDWRUUQZpb3xNcBMt1zWIyjA2P5E7haiXUt4coqN0J/CMuTnch6SW/XtT oEJXxBfjRTQlcm7ss6MsvB9lBHh5PwJA1+Ij39td/MQ6OOGLBOTrxYwsmSqV7v06 nwIk84jJsIdfRrlZe3xeWSf4C+Kr1YBzhsG3VUw511VZpwO/3sL0jrV9+ODjI6qf Q9tGLMVUN8yl1dDguBVZBA6OV20uza0uTmFrc3hdIzEx0WS+xuOSqxPiTwcaU91p UOZRgF0poB0bHflDyE7FV+vqy4DrK+7KlBob6TF7s9VyglArE8U8tfd5D/gAmsxP 5HWk8xb+RgU23Nek7TMPC8ml+UnXLweiE+/liSlO04Kh8s5V4iZncYdAP7Z2gX5P ZfBGtY6KtUlXit4hjreo2l2K1umuGgtvhKRymbntcvjryY88GfU/jG9p8y5kku3w cYnB0gJ714EkmDLmL/aVk/jqjAI6ghj0lBZu96qcD9UNw5Xha3MQgcS8nQvDQ3/l ay2uI+LFtgxw70x19oxSmorRSTLuz31Omo2rI54+7ML5utkqKU4H3hLVkbKRCAvT +/7FlJRB5OgpAgMBAAGjggJAMIICPDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHxS ah4wA2NPiNHqSzBvT3rEzgt2MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMEoGA1UdEQRDMEGCD2FnaWxlcmVubmVzLm9y Z4IZYWdpbGV0b3VyLmFnaWxlcmVubmVzLm9yZ4ITd3d3LmFnaWxlcmVubmVzLm9y ZzCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcC AjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24g YnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0 aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5 cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQCM7yNKGjhEmYc+ w4NZzF8/OydAQNCi0fMHOHF30Gam9foUrFgeHNCdMvXGfyGWueBB7IcP04rMC8Y/ is2rjE3qS1xkLJ0YdNAUuRBfj8lH4yRe44lcDhPmUEnbgVCdlOOWH6iWdPpm2n8A D689xicstNLzQl6QIGdjfn0QwIf5ltwxAe9ya2vmifaCRVQImddzChb0AkN5i70P u5WfYvRxgAIbzBV4SPhxX2iahOi+ufHXahJkZuL3VpmM0RM/dNxomXfl7lGC6DJh hw33BM4bzRi/ib6R0PFfu4QY0QiKYVcj9E3/FtputG+tMwgCatTGsUmr+xAGSxqC 4KljhMoF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnNRALzvhfi1UbX0Q2Tr6 EvgOakuxbpC04u6t31IIgzD7CdodPLgdYbDf7p/hGj1wtHrsBhVxChanj0JyJdiL 3oQsRaH2HHkBCSy9FeENZFRRBmlvfE1wEy3XNYjKMDY/kTuFqJdS3hyio3Qn8Iy5 OdyHpJb9e1OgQlfEF+NFNCVybuyzoyy8H2UEeHk/AkDX4iPf2138xDo44YsE5OvF jCyZKpXu/TqfAiTziMmwh19GuVl7fF5ZJ/gL4qvVgHOGwbdVTDnXVVmnA7/ewvSO tX344OMjqp9D20YsxVQ3zKXV0OC4FVkEDo5XbS7NrS5OYWtzeF0jMTHRZL7G45Kr E+JPBxpT3WlQ5lGAXSmgHRsd+UPITsVX6+rLgOsr7sqUGhvpMXuz1XKCUCsTxTy1 93kP+ACazE/kdaTzFv5GBTbc16TtMw8LyaX5SdcvB6IT7+WJKU7TgqHyzlXiJmdx h0A/tnaBfk9l8Ea1joq1SVeK3iGOt6jaXYrW6a4aC2+EpHKZue1y+OvJjzwZ9T+M b2nzLmSS7fBxicHSAnvXgSSYMuYv9pWT+OqMAjqCGPSUFm73qpwP1Q3DleFrcxCB xLydC8NDf+VrLa4j4sW2DHDvTHX2jFKaitFJMu7PfU6ajasjnj7swvm62SopTgfe EtWRspEIC9P7/sWUlEHk6CkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294885788156513816665176724973415357742152 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-28 03:56:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-26 03:56:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agilerennes.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 639806925368047495276260626165797268584149713580035162140195181297221395885576605995133147381696417086027901666847987286348913301573092307362069655419709425208488112430945114349024597926914688236915267312869423288141800353525708441007733264020501574044335025348798237268547016719021611392693509786219730167861829695883343825848240403699901572659006660063817844309420703153659811560174710779636279589684886971257500710249251564655318744679752803967267518629659473970274211930932459638148422543499580789774979671667255528699037280295225533464095219907396426274711152723818169104293615153188937430557455448001749139048467107826891459613306667188879853524923331749828519422781763880345164586772977427439292301554607765494254307959941852990043002174436106384560724442991792195423491367060158351458919504491241328017632705390537520184089012085250030284095098890997882670925585242391379008383480591898922421575580822159765916874140857027358372213014426586588443279895427842719324302309883699057045258497323398167899313803587025455275673952237640821772650576220640250439176922792426830596846323312752572845977739604013434673831243147030657433457153973514491896541849536392797911751951857482449467033434415543828591561176842682207933378652201 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7c526a1e3003634f88d1ea4b306f4f7ac4ce0b76 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilerennes.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agiletour.agilerennes.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agilerennes.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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