silkroad.parisfashionshops.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0c:b1:d5:5d:24:4d:4f:07:fd:2b:a7:21:c8:d7:ef:92:8c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=silkroad.parisfashionshops.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:b1:d5:5d:24:4d:4f:07:fd:2b:a7:21:c8:d7:ef:92:8c
Serial Number (int): 265656627401957032407962640499372786160268
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:ae:81:de:58:ec:2a:a2:2f:c0:1d:a6:b5:0b:5f:c3:4b:8f:36:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ab:8a:b2:df:cd:c7:99:b1:24:47:19:c8:b9:68:11:0e:32:25:48:6f
Fingerprint (sha256): 3c:57:b5:5d:e4:54:7c:3f:95:94:2d:bc:54:45:d7:45:c0:40:f6:c8:77:28:be:a6:77:22:d3:6f:be:bd:31:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate silkroad.parisfashionshops.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for silkroad.parisfashionshops.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

silkroad.parisfashionshops.com

Other certificates including the domain name parisfashionshops.com

(limited to 100 certificates)
intranet.cifa-fashion.com
storage.parisfashionshops.com
www.intranet.cifa-fashion.com
mag.parisfashionshops.com
forms.rmachado.group
mag.parisfashionshops.com
crm.cifa-fashion.com
silkroad.parisfashionshops.com
cifa.parisfashionshops.com
forms.rmachado.group
formular.smartpoint.ro
forms.youcloudit.com
formular.smartpoint.ro
formular.smartpoint.ro
r.newsletter.parisfashionshops.com
sandbox.marketplace.paris
parisfashionshops.com
tw.parisfashionshops.com
silkroad.parisfashionshops.com
silkroad.parisfashionshops.com
forherparis.com
magazine.parisfashionshops.com
forms.rmachado.group
parisfashionshops.eu
silkroad.parisfashionshops.com
forms.rmachado.group
verzeichnis.parisfashionshops.com
cifa.parisfashionshops.com
formular.smartpoint.ro
r.newsletter.parisfashionshops.com
forms.rmachado.group
formular.smartpoint.ro
reco.parisfashionshops.com
reco.parisfashionshops.com
www.pick-up.cifa-fashion.com
r.newsletter.parisfashionshops.com
redmine.parisfashionshops.com
silkroad.parisfashionshops.com
reco.parisfashionshops.com
download.parisfashionshops.com
silkroad.parisfashionshops.com
forms.rmachado.group
old.cifa-fashion.com
forherparis.com
formular.smartpoint.ro
wsn.parisfashionshops.com
redmine.parisfashionshops.com
img.newsletter.parisfashionshops.com
*.parisfashionshops.com
www.old.cifa-fashion.com
formular.smartpoint.ro
formular.smartpoint.ro
www.location.cifa-fashion.com
img.newsletter.parisfashionshops.com
*.parisfashionshops.com
v2.parisfashionshops.com
annuaire.parisfashionshops.com
cifa.parisfashionshops.com
mag.parisfashionshops.com
parisfashionshops.eu
silkroad.parisfashionshops.com
sandbox.marketplace.paris
formular.smartpoint.ro
intranet.cifa-fashion.com
reco.parisfashionshops.com
silkroad.parisfashionshops.com
silkroad.parisfashionshops.com
event.cifa-fashion.com
forms.parisfashionshops.com
cn.cifa-fashion.com
reco.parisfashionshops.com
ru.parisfashionshops.com
formular.smartpoint.ro
directory.parisfashionshops.com
silkroad.parisfashionshops.com
www.intranet.cifa-fashion.com
formular.smartpoint.ro
parisfashionshops.eu
parisfashionshops.eu
forms.rmachado.group
redmine.parisfashionshops.com
v2.parisfashionshops.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
img.newsletter.parisfashionshops.com
forms.rmachado.group
formular.smartpoint.ro
cifa.parisfashionshops.com
formular.smartpoint.ro
cn.cifa-fashion.com
parisfashionshops.com
forms.rmachado.group
forms.fehrbraunwalder.ch
directory.parisfashionshops.com
formular.smartpoint.ro
formular.smartpoint.ro
reco.parisfashionshops.com
mag.parisfashionshops.com

Certificate

The complete raw certificate details for silkroad.parisfashionshops.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E5HoPNchy7hVxEToojc
TjE8JumoiFMZS/MC9yfSmoJxbzZ04xGD934dceG2Om2JXK0lIk8fxEI4yvkfc5Ay
TwTUPImEtwwaGI9wFEEid2PcVsJFMR77paDTgFfziZ4KHBHHyJWNZj9U/DSfdx3+
u/271yl4Ioci1G9HK5e40NEUHlf3e7i1UhTh8eafdmW3Sl0JDmZDz5YMmUMUrxA+
RczbG/f99qojp3PWVOdAWvm3Z1lCLymroHsyvdTkKYhtllBBy5A/jmYFZwBIexIX
jzr8BoBLYL8WAQ7C3KWsat/vPj+VUCT+dTk42lBoGmDB8hr33nVNor2a9ovzh+fg
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265656627401957032407962640499372786160268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-10 15:19:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-08 15:19:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'silkroad.parisfashionshops.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27811028300432812682130567878640870419738686196162738830020781068879634627200638923995765679421395053664061348794480679397246566201753606768712571626031260476817472850587633099943308822495622937744391430781112832715547897842207882704691427043729668406722122006249693682383011101338772075602906347768557098973562561858556696468034745855455721731722464980326016187781364765382198012231426534813623697279640524346711795229605004780351264811288889244725868163797185009716789816997185307668166357754648110512463828008252539323345078031862359373088381174006953053707484590510484459508077645636188544871947442077880103198847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8ae81de58ec2aa22fc01da6b50b5fc34b8f36f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silkroad.parisfashionshops.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000180aec4c3dd0000040300483046022100c47b6cb8de44915bb78ae5f7d50645c1cd7da647e2d871ae4b42a439bc278485022100d7c7d81e7875a7eaa9632b4ee22f49b44502ed47dccdd59a80b1f3156e1940ba00770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000180aec4c4050000040300483046022100f8baa7f0d59ca7e7dfb218a2bc145536da88d49b6fb09a4ebc24ed1bc69bc51c022100f67f6a2eced8bfe31fedbdb72775ffe9955f3d88d51ff71363593d55fe1d56b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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