carrieres.bg.auf.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:11:45:e0:8a:f7:1e:e4:2a:7c:cf:bd:64:ee:bd:3a:3d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=carrieres.bg.auf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:11:45:e0:8a:f7:1e:e4:2a:7c:cf:bd:64:ee:bd:3a:3d
Serial Number (int): 261700099860882978663907235622841843792445
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:16:69:f2:ab:ce:bf:ac:44:67:d0:95:44:14:ef:f2:83:42:18:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:37:e2:21:a6:86:6e:97:35:d7:bb:0f:40:d0:79:7e:73:ce:d6:76
Fingerprint (sha256): 3a:15:16:63:55:48:8c:c1:1c:48:9a:24:d0:11:8f:18:70:70:32:0f:32:04:eb:73:d7:7e:c6:19:3e:99:56:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate carrieres.bg.auf.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for carrieres.bg.auf.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carrieres.bg.auf.org
elgg.bg.auf.org

Other certificates including the domain name auf.org

(limited to 100 certificates)
mooc-certice.org
pypi.auf.org
carrieres.bg.auf.org
ag2017.auf.org
mooc-certice.org
ag2017.auf.org
2017.colloque.auf.org
2018.colloque.auf.org
colloqueannuel.auf.org
piwik.auf.org
www.colloqueannuel.auf.org
frontal.auf.org
mooc-certice.org
esfam.bg.auf.org
conventions.auf.org
prototype-index.auf.org
frontal.auf.org
prototype-index.auf.org
coda.auf.org
2017.colloque.auf.org
listes.cm.refer.org
apprendre.auf.org
2017.colloque.auf.org
esfam.bg.auf.org
foad.refer.org
mooc-certice.org
esfam.bg.auf.org
apprendre.auf.org
listes.cm.refer.org
2017.colloque.auf.org
*.auf.org
2018.colloque.auf.org
2017.colloque.auf.org
redmine.auf.org
redmine.auf.org
listes.cm.refer.org
listes.cm.refer.org
sirh.auf.org
wcs.auf.org
*.auf.org
listes.cm.refer.org
www.eg.auf.org
2017.colloque.auf.org
foad.refer.org
2017.colloque.auf.org
colloqueannuel.auf.org
esfam.bg.auf.org
fad.eg.auf.org
brazza.cm.auf.org
colloquesofia2019.auf.org
coda.auf.org
carrieres.bg.auf.org
foad.refer.org
foad.refer.org
2017.colloque.auf.org
ag2017.auf.org
2018.colloque.auf.org
2017.colloque.auf.org
colloqueannuel.auf.org
2018.colloque.auf.org
scodoc.bg.auf.org
colloqueannuel.auf.org
mooc-certice.org
cru-eco.auf.org
www.eg.auf.org
colloqueannuel.auf.org
2018.colloque.auf.org
colloqueannuel.auf.org
esfam.bg.auf.org
api-apprendre.auf.org
www.mooc-certice.auf.org
id.auf.org
assistance-informatique.auf.org
www.colloqueannuel.auf.org
*.auf-semaine-francophonie.auf.org
mooc-certice.org
cru-eco.auf.org
carrieres.bg.auf.org
www.eg.auf.org
2018.colloque.auf.org
foruminnovation2019.auf.org
moodle6.eg.auf.org
foad.refer.org
2017.colloque.auf.org
mooc-certice.org
prototype-index.auf.org
assistance-informatique.auf.org
listes.cm.refer.org
www.ongolafablab.cm
2017.colloque.auf.org
confrasie.auf.org
foad.refer.org
colloqueannuel.auf.org
annuaire.auf.org
2017.colloque.auf.org
preprod-authshib.auf.org
colloquesofia2019.auf.org
moodle7.eg.auf.org
www.eg.auf.org
2018.colloque.auf.org

Certificate

The complete raw certificate details for carrieres.bg.auf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYzpsRa7qhhEPGNj3eva
XTHWsq30rVp1A/Lod2Nk4ao1alfkYxO+GjBZTOpcaSXpvF8VxM5kwmqc1ztn0Xxx
YvbhRjZAmbMaH0VxzZD6Lol5p4/9y/iv9U0V9NnOce3rVvS9UeJcbEFznQPO7Oy6
FBYCsnR44J7Slo4qOy3b/MCnrtJKEth7luBD9b7d4g0eURSZD66Qe3lZXGHRAE4L
Fn8naK4qjI8ZTrP6K9yKoLt1D+oCKNYaQg39GRMo3Iua2n3TZZQEU4Ol1OgLFhCC
j09gv+gi1IQy+t0QbZ2emisRQ8AwxAboE3M+/KM9On73URdld+zxAdqk/y4PSAbG
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261700099860882978663907235622841843792445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-27 07:18:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 07:18:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'carrieres.bg.auf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24938432798601376598208096312999258533301255751404188241646436191351401186773861082455929930627649694364205469823428651072814998448773483115019666968096568076575241480186848820503396362250704181203820755329889856280806365470789705742429118503081924848395993292429645648677325929811197282817250848852493581803266869982790210791157579854757020080620781919421783718744352836696742388990968967572718239773696260641162711645837969293261236187571936521114654466684877971213233725124775815132368776171676134435209242713292447186504339445782370868501305528685587846465603026383618214036185386564779578334993396733989163026059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							751669f2abcebfac4467d0954414eff283421840
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrieres.bg.auf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elgg.bg.auf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000164dad1711c000004030047304502203361c1f8bef80fbf0f318e46d60216359078254b6dc3d940f7400e5ae3f6e161022100cdcad3e51a762f44893026530feedbc028c760dac692c94e31e4b927a30546fe007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164dad173090000040300483046022100a469b0f225657a697c7e3d79a07f073e3268112bbb37b296efc3cf50368d8ac8022100c4a1f9f9bde223f53f54f3a2d1213087afaee21dae3f0b25cda3cafabb129076
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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