rapportactivite.hebergement-afpa.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:1a:e2:61:30:67:7d:be:56:b0:06:a4:07:44:1f:0b:60 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rapportactivite.hebergement-afpa.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:1a:e2:61:30:67:7d:be:56:b0:06:a4:07:44:1f:0b:60
Serial Number (int): 295741112212504673758896586173366505769824
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:3c:0c:5c:8d:0e:2d:e6:62:60:f5:76:d1:2d:31:ac:78:64:7f:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:ea:24:ce:7f:69:ca:2a:46:fe:d7:51:78:bc:23:3d:96:14:1d:82
Fingerprint (sha256): 31:d7:ae:51:21:e6:f5:90:0e:d0:17:1d:e6:03:24:c0:e0:c1:38:d3:b0:0e:2b:ea:4c:d4:cb:a3:6f:7a:43:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rapportactivite.hebergement-afpa.fr

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rapportactivite.hebergement-afpa.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

certification.afpa.fr
questionnaires.hebergement-afpa.fr
rapportactivite.hebergement-afpa.fr
www.catalogues.afpa.fr
www.certification.afpa.fr
www.crm.hebergement-afpa.fr
www.questionnaires-dde.afpa.fr
www.questionnaires.hebergement-afpa.fr
www.rapportactivite.hebergement-afpa.fr
www.visites-virtuelles.afpa.fr

Other certificates including the domain name hebergement-afpa.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for rapportactivite.hebergement-afpa.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TAyrNvRhxyzKUEotH8G
16pYtQW5xWHXyHzOOtGgWxBPohbJPBF6zjWALNFZ4JhtF3LvQQMqbvtOcMKFIc0x
wkyVliSlIj/qtzyE5hBjyMaz9L7R5RuQD76jMdDonsv2PKNa78ibTLyQtwcTisew
6zZ1j9/aOK2g6op+CEGNKTBo1bjopgLHVYRs/fh1kgMDs6XcUqksoYakyT8sgwao
aDv/hVxUHmgQKBAiXOX9p1tjh/L1+rSNxqrpoHF7UQMUemVKw69beviJ24CfxlRf
3QBLZ5IFe0C+TmPKu31mRDFuELCNFq1ioPNPBcT+VUKmRH91mTsQCONftppCYiYz
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295741112212504673758896586173366505769824
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 15:57:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 15:57:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rapportactivite.hebergement-afpa.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28427385912383580514046140006789108781706201585132539027200664269384921153552229073725022079338466056732015431662339363636283484746233448520925294194406129803394020892358024616089918896985212832224485657906276355825103934680949339397780865721698194386524388889369804218214242062816252791146334406276592732852769413926481553225452524666843621519027992114032842653934081795443852339025051033520720265782411073690884441361417617141621685708730459236669149811530643215013142495850185251760907359758276644064951385682059522405280095307771289993914567988502556603715772787143965758165821741151503319031311954577676583711559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d3c0c5c8d0e2de66260f576d12d31ac78647fc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (325 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certification.afpa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questionnaires.hebergement-afpa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapportactivite.hebergement-afpa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catalogues.afpa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certification.afpa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crm.hebergement-afpa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.questionnaires-dde.afpa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.questionnaires.hebergement-afpa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapportactivite.hebergement-afpa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visites-virtuelles.afpa.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001703008ca52000004030047304502200426b2b9bec0e6bc1a500179a160ea8e3c1faebe4d07c30a06ad4c11f3d384a1022100f60dc562e2ff1941424ec9a9e409176960f51faaff7de838064222d614c5ca35007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001703008ca3f0000040300473045022048924f9b7aa0ba8e13b2c36d74be6d3a76387668a8a8bc982bed22a3437df1d7022100c3b2733cbe3fccdd38411dfdec2d49c678fed5ce2056b9075b7143af47292c00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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