auth-2.pie.cri.epita.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:74:27:51:11:13:0b:e6:c9:ed:c3:54:3b:33:0e:87:a2:4c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth-2.pie.cri.epita.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:27:51:11:13:0b:e6:c9:ed:c3:54:3b:33:0e:87:a2:4c
Serial Number (int): 300861873172300736433181894539177225593420
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:ad:f9:b2:b6:68:d5:36:79:7a:22:36:38:36:51:76:83:a9:6e:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:ad:72:f0:6a:95:78:1e:5b:e8:a6:17:03:d7:29:7a:0d:02:14:50
Fingerprint (sha256): 32:91:5b:62:b3:2e:fc:6c:94:96:b0:eb:7d:57:89:5c:96:df:8a:e4:6f:8c:b2:66:a6:60:bd:d0:03:7b:e0:f8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate auth-2.pie.cri.epita.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth-2.pie.cri.epita.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth-2.pie.cri.epita.net

Other certificates including the domain name epita.net

(limited to 100 certificates)
inge-etud.epita.net
intra.cri.epita.net
inge-etud.epita.net
absences.epita.net
apply.epita.net
cri.epita.net
epita.net
doc.cri.epita.net
inge-etud.epita.net
www.epita.net
acdc.cri.epita.net
inge-etud.epita.net
acdc.cri.epita.net
intra.cri.epita.net
inge-etud.epita.net
cri.epita.fr
epita.net
absences.epita.net
inge-etud.epita.net
apprentissage.epita.net
absences.epita.net
intra.cri.epita.net
cri.epita.net
accounts.cri.epita.net
cri.epita.net
sup-sub.cri.epita.net
inge-etud.epita.net
apply.epita.net
cri.epita.net
tickets.cri.epita.fr
apprentissage.epita.net
auth.pie.cri.epita.net
inge-etud.epita.net
accounts.cri.epita.net
cri.epita.fr
photos.cri.epita.net
photos.cri.epita.fr
photos.cri.epita.fr
acdc.cri.epita.net
photos.cri.epita.fr
epita.net
photos.cri.epita.fr
doc.cri.epita.net
doc.cri.epita.fr
absences.epita.net
doc.cri.epita.net
absences.epita.net
epita.net
inge-etud.epita.net
sup-sub.cri.epita.net
accounts.cri.epita.net
static.cri.epita.fr
apply.epita.net
doc.cri.epita.net
epita.net
auth-2.pie.cri.epita.net
www.epita.net
cri.epita.net
doc.cri.epita.fr
inge-etud.epita.net
inge-etud.epita.net
cri.epita.fr
apply.epita.net
www.epita.net
doc.cri.epita.fr
absences.epita.net
acdc.epita.fr
sup-sub.cri.epita.net
sup-sub.cri.epita.net
photos.cri.epita.fr
doc.cri.epita.fr
acdc.epita.fr
epita.net
accounts.cri.epita.net
ipxe.pie.cri.epita.fr
acdc.cri.epita.net
doc.cri.epita.net
apply.epita.net
www.epita.net
doc.cri.epita.fr
tickets.cri.epita.fr
doc.cri.epita.fr
www.epita.net
tickets.cri.epita.fr
tickets.cri.epita.fr
cri.epita.net
auth.pie.cri.epita.net
static.cri.epita.fr
apply.epita.net
grafana.cri.epita.net
v2ssl.webservices.chronos.epita.net
photos.cri.epita.fr
doc.cri.epita.net
accounts.cri.epita.net
apply.epita.net
www.epita.net
acdc.cri.epita.net
photos.cri.epita.net
cri.epita.net
www.epita.net

Certificate

The complete raw certificate details for auth-2.pie.cri.epita.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300861873172300736433181894539177225593420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-13 13:57:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-11 13:57:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth-2.pie.cri.epita.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831053879926392172623183192917135635229465172145101199989653786734353928684380299192997273882403023446399300375052572910815299636995637759035883182167664079227772735216171304130968303334653425059377273476743070598727231440166572076618482361194292716423090675555534805425055264163777918563072861220308874392102561119973778025033532035693229235628975210636124940565040252114283801531319825122436562830920174095065718676664354214253832529704906920938899100688285461346179834032720289448664415536176263693855223399591066466467505819526089334311415500901235839451262053658376587110967974568733255664597938804269074557031744147569667648684493803092622780848345475305118062743454334038108957555359459653447676360413296399529223626421138765451936467860164112537205081164628230489443692055219114826324025455124311182778528853519596592346303864871010941907274910067383532970175852665995336253345221579015082270722788650304245887756416706993200754782798831238092479926669549603474304069124371621393934033688060822444407315144647898116867039009792389949066376376952220081986463376561500553827045125587723546460926608503087254939517632785620737046160212387464314436156910947296124326071489845529765138503239920010168156018974768440819578021386607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2adf9b2b668d536797a22363836517683a96e62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-2.pie.cri.epita.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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