t.voyages-sncf.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:c5:13:dc:b6:98:6d:3c:af:25:8c:8b:c0:99:a4:17:95 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=t.voyages-sncf.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:c5:13:dc:b6:98:6d:3c:af:25:8c:8b:c0:99:a4:17:95
Serial Number (int): 284057455057469431279085074700060017825685
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:2a:b1:24:07:66:9c:63:e7:a8:c3:75:a6:d0:76:b8:8b:b6:f7:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:c7:d3:46:16:67:e6:be:35:22:1b:b3:03:1a:e0:55:c4:49:f6:52
Fingerprint (sha256): 36:e3:5a:27:d6:5a:09:11:02:49:40:76:76:29:07:05:20:f6:73:44:9a:03:20:db:71:86:79:82:90:55:52:4f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate t.voyages-sncf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t.voyages-sncf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t.voyages-sncf.com

Other certificates including the domain name voyages-sncf.com

(limited to 100 certificates)
*.carmen.sncf.fr
secure.uk.voyages-sncf.com
www.voyages-sncf.com
akiovsc.voyages-sncf.com
offre-connect.voyages-sncf.com
cinemagraph.voyages-sncf.com
www.expedia.com
acquia-sites.com
jeu.voyages-sncf.com
acquia-sites.com
acquia-sites.com
ctrmgr.voyages-sncf.com
sstats.voyages-sncf.com
recette.bagages.voyages-sncf.com
owa.voyages-sncf.com
jeu.voyages-sncf.com
t.secure.be.voyages-sncf.com
voxpopsoralhistory.com
t.voyages-sncf.com
tgvpop.voyages-sncf.com
acquia-sites.com
admins.voyages-sncf.com
jeu.voyages-sncf.com
acquia-sites.com
rec2akiodv.voyages-sncf.com
*.voyages-sncf.com
acquia-sites.com
secure.analytics.voyages-sncf.com
formulaire.vsct.fr
offre-connect.voyages-sncf.com
www.programmefid.com
acquia-sites.com
adhesion.monforfaitannuel.voyages-sncf.com
spectacles.voyages-sncf.com
*.api.voyages-sncf.com
abonnement.voyages-sncf.com
acquia-sites.com
secure.ru.voyages-sncf.com
www.org.destinations.voyages-sncf.com
agence.voyages-sncf.com
autotrain.voyages-sncf.com
acquia-sites.com
secure.voyages-sncf.com
*.api.voyages-sncf.com
jeu.fr.voyages-sncf.com
www.expedia.com
client.es.voyages-sncf.com
abonnement.voyages-sncf.com
www.expedia.com
formulaire.vsct.fr
www.expedia.com
bagages.voyages-sncf.com
interrail.voyages-sncf.com
voyages-sncf.com
jeu.fr.voyages-sncf.com
jeu.eu.voyages-sncf.com
secure.analytics.voyages-sncf.com
jeu.fr.voyages-sncf.com
croisieres.voyages-sncf.com
t.voyages-sncf.com
ouiwork.open.voyages-sncf.com
kli.uk.voyages-sncf.com
recette.adhesion.monforfaitannuel.voyages-sncf.com
tls.automattic.com
admins.voyages-sncf.com
t.voyages-sncf.com
www.expedia.com
secure.analytics.voyages-sncf.com
cinemagraph.voyages-sncf.com
cinemagraph.voyages-sncf.com
billetprime.voyages-sncf.com
ouiwork.open.voyages-sncf.com
ouiwork.open.voyages-sncf.com
*.preprod.voyages-sncf.com
acquia-sites.com
integration.adhesion.monforfaitannuel.voyages-sncf.com
jeu.voyages-sncf.com
recette.adhesion.monforfaitannuel.voyages-sncf.com
cinemagraph.voyages-sncf.com
abonnement.voyages-sncf.com
juniorcie.voyages-sncf.com
juniorcie.voyages-sncf.com
adhesion.monforfaitannuel.voyages-sncf.com
acquia-sites.com
*.voyages-sncf.com
secure.en.voyages-sncf.com
kli.uk.voyages-sncf.com
sstats.voyages-sncf.com
facebook.voyages-sncf.com
ventes.juniorcie.voyages-sncf.com
acquia-sites.com
www.expedia.com
acces2.voyages-sncf.com
www.voyages-sncf.com
cinemagraph.voyages-sncf.com
offre-connect.voyages-sncf.com
agence.voyages-sncf.com
autotrain.voyages-sncf.com
secure.ru.voyages-sncf.com
t.voyages-sncf.com

Certificate

The complete raw certificate details for t.voyages-sncf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284057455057469431279085074700060017825685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 21:40:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 21:40:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't.voyages-sncf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869495807572381119126060767123445905393424323310796908626393003807421402547654931163005440366419465884367774807373383382960688720798907384011161912816967392024423209253156828799985163901678122148873164255448350269346788332742161480299803635487942404395367582351489809714762291171424845067842941565721536278598512414195989747902302720882749284438259895320592234300570092413818122606456294642859730892314508805392821264133677020303038302022943696728424934441952372025854225428244526620253281721816777075887460261998827986629877407342238061269534111212665568529436151926225394721476617925087419532298762209982483925817051828505295417258007143936241519420711979632579808577496195665789989738143558397428102939018038976582676947264689461989440613285329691020060620303631715555947259597631272165956397881752392779826601815865192729772818825022899215767761665305953360262133984563410545022668236083725189264559166466874033813276264973576066777650664491095855139339612293717504712670232380757840552884836079662490706390598472462543205167936779152687790630930538927941025888131014997944220208293188924481177083177011353487411927422248718178169351529911962510717721279518855606232296508743037230851146275446951754527483196864449297330094397881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							142ab12407669c63e7a8c375a6d076b88bb6f747
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.voyages-sncf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001712d9aa75b0000040300483046022100828c047d70c04e6a3a84c4862bdf4fcedfb4a11561440791149b6dfe0fe364bf0221009a6095fd38f07acbd7368714509277045f79ad59c1a7991bad224153fd1f926a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001712d9aa7be0000040300473045022100f47bbb60f7e7daa4f47e4698e4a5c25cecfe46fd4f33e25f4c4b8eec8af8e57e02200b9ef3cfb7b5af2051c845fbff2b3ed7662dc38af128dee49e34f632dad214b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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