lespot-dax.fr

Issued by R3

About this certificate

This digital certificate with serial number 04:18:3e:dc:c3:9d:14:d3:48:24:b6:dd:22:f7:23:b3:c8:a2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lespot-dax.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:18:3e:dc:c3:9d:14:d3:48:24:b6:dd:22:f7:23:b3:c8:a2
Serial Number (int): 356699478941706191506862146875251261425826
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:e4:bb:64:2b:70:df:94:ff:3c:14:e6:45:08:44:8a:7e:c3:b1:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5f:76:e2:f0:6d:24:c2:f1:5a:67:fb:34:0f:55:a4:24:5c:7c:5f:eb
Fingerprint (sha256): 2e:d3:e1:6b:91:d8:6d:56:26:7b:0e:99:26:00:5f:46:da:70:3f:32:f1:23:b0:f2:b6:fa:49:ef:26:ea:4f:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lespot-dax.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lespot-dax.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lespot-dax.fr
www.lespot-dax.fr

Other certificates including the domain name lespot-dax.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for lespot-dax.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sfiRLHiVxgcdPPjspTE
yEN8Dcr4nsD9CgVA1rKqzUOsqeWaqimbFf5NbZq+//oiUUh5jCgP56sCXPXuk0IW
MlN5zNm8fotBEt9lv2qBXKreSuTurKff3/o/Qurx1clzSVfus6M9jIdQIeDbyJRa
8XuLcp2gWrlLmwv+UuvFOQU7BERf2FtbVd01AN7rKQnv/n0RJz2ZRFFStfBwezUj
hHdjsJ6rjBQSMbq9X0bbJmQNYbKKHS/oM+xtXBwxvkUVz6RWFajIn4+DW+b6+9xE
L7cy5k48UQ0guq3WBzR/GjV7WNf5AthaDgGzQL6SxYdHtFjV05B8CcsPq0l5ge89
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356699478941706191506862146875251261425826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 11:33:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 11:33:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lespot-dax.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27618516887932371104360680502495543284900522321186406939961509018462141539799548479009711581743037693652305925359360297597340667151199634876195324792631756889891463088284009573057756685914415409469497023027314583902010159003229963381571037040609297542315308808189996419672027558369637220955759754484072079686301541695068349642306874845503362222297353303863069308245209111090282100715292678502434349200639906687706984690959696536998994521873326898660782196166177347012603463173989026469208574644788580232156815752640464284365823309582673471351680507004935091297406054462736380449794670331768351406602296110018984885509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21e4bb642b70df94ff3c14e64508448a7ec3b189
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lespot-dax.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lespot-dax.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001891bbe4875000004030046304402207c71e93e8a7177ebed872c553e62ced2d1612475de76b93cd3b3a24bf3a4edc4022023c0c4c11d653e1b5606524934863509f103990e7d0234194ea169f6001b1050007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001891bbe48ac000004030047304502200e4b4cdeafbc27c32d89591f5e339edc35e82d0f3d1d7959ef5b793c634a091f022100d63e53e576f600686b57bcb0601de9293f44c1692ca9eac596c33802d7753f55
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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