aide.assistant.sncf

Issued by R3

About this certificate

This digital certificate with serial number 04:b7:3b:d7:cf:99:99:74:d5:3f:b1:c1:f5:81:21:c6:04:67 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aide.assistant.sncf

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b7:3b:d7:cf:99:99:74:d5:3f:b1:c1:f5:81:21:c6:04:67
Serial Number (int): 410800361879776809694249586861432268784743
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:91:fb:ce:1c:35:87:f2:5d:be:11:5a:da:db:07:37:05:f0:eb:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:fc:ff:40:be:6f:43:60:25:59:58:25:f8:ef:03:5c:8c:f3:ad:3b
Fingerprint (sha256): 3d:53:c8:f9:00:f6:77:6d:d1:97:cf:cd:99:28:06:26:0d:76:9e:20:5f:c2:d0:4a:83:95:07:81:89:d1:01:27

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aide.assistant.sncf

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aide.assistant.sncf

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aide.assistant.sncf

Other certificates including the domain name assistant.sncf

(limited to 100 certificates)

Certificate

The complete raw certificate details for aide.assistant.sncf in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410800361879776809694249586861432268784743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 23:38:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 23:38:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aide.assistant.sncf'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745978079970780258387597919460472465018634748238929614606943385429247854415824683339277912464692039075842020967538208552203120540061711145765835701810059018515075669453885432321335408556492107757605344157398932041188078860798824344138603340180529576373878433668571237972203440341334741018950763028251905398021190012738845945529087089211305468315457608088165535544420940284702053228109693257655877275792126741436865663481090483023873299495587262625691381195111056741881492430955386855815095020977881493417576396414698747605807303296654765818227520217921275242311386470159995340264073879407760273372410986016914308198887389695413407424758081478407411717481478523381404697290055498234586408924948535661270795907960838083613482881974970437143195754645755025221536329114394150556702425570871757919489926415204130055059023840757213601948410701278535682464950046940187404156036334028497519659114885920437074248658959111044556740874301694461636504045982292877521506249545075389148596225729392572208872945830122612774745717497805789838937429174677843925743193950232020355465233793520861905071514257270843945249553132704095847202174877221295710048505468477770196256802877328955013756650360096474725358584449041782974878149800771340128264593939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1191fbce1c3587f25dbe115adadb073705f0eb3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aide.assistant.sncf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4fabbe5f0000040300483046022100e5a294bd85f01043be0bde79d966a8c985c550106e4e6e5642c2787bee83c2c9022100bb548934cd958e88daacad434a27d65309c1d6223c873c7cb9c9fec3d1bc247c0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b4fabbe4f000004030046304402205ace4cbe7d53df608156030d2922f1f30ffbf81730ea56731280e0408049a13d0220098b8e9216a1b58dc8010be0640ee5ffdf060b4a8a08a9ec982ced02740ddade
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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