www.pressnsoft.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:8f:49:40:b9:48:fa:b4:d9:fa:fa:c4:fb:ac:35:ca:18 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pressnsoft.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:8f:49:40:b9:48:fa:b4:d9:fa:fa:c4:fb:ac:35:ca:18
Serial Number (int): 333326897169420682447940713265594751109656
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:46:b6:ce:1f:b7:23:3f:af:d6:3e:d4:75:73:73:42:ba:01:f4:a4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:7b:38:90:38:97:77:77:e3:f1:f8:d3:83:8f:31:a0:ca:5f:32:81
Fingerprint (sha256): 3e:da:fd:2b:20:54:21:9c:82:65:11:2e:b0:08:ba:a9:91:4d:cc:a1:93:3e:27:50:ff:7a:45:a3:84:5a:3e:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.pressnsoft.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pressnsoft.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gtec.pro
www.cabinet-gtec.fr
www.pressnsoft.fr
www.runrunmonkey.fr

Other certificates including the domain name pressnsoft.fr

(limited to 100 certificates)
gatheringtoolstest.gtec.pro
pressnsoft.gtec.pro
gatheringtoolstest.gtec.pro
lemasdelentrecollines.com
forum-clients.eloquant.com
hotel-optimiser.gtec.pro
www.runrunmonkey.fr
pressnsoft.fr
www.cabinet-gtec.fr
beta.it-shaker.com
gtec.pro
www.pressnsoft.fr
rodacom.gtec.pro
gtec.pro
blog.wereport.io
rodacom.gtec.pro
www.blog.wereport.io
www.blog.wereport.io
blog.damaaas.com
pressnsoft.fr
www.cabinet-gtec.fr
tmm-software.gtec.pro
gtec.pro
www.la-relation-client.com
gtec.pro
www.runrunmonkey.fr
gatheringtools.gtec.pro
www.runrunmonkey.fr
www.runrunmonkey.fr
gtec.pro
pressnsoft.gtec.pro
www.masdelentrecollines.com
gatheringtools.gtec.pro
gatheringtoolstest.gtec.pro
www.runrunmonkey.fr
www.editeur-logiciel.com
oxio.fr
pressnsoft.gtec.pro
inspearit.gtec.pro
open-prod.gtec.pro
www.cabinet-gtec.fr
pressnsoft.gtec.pro
www.la-relation-client.com
www.blog.wereport.io
www.pressnsoft.fr
pressnsoft.gtec.pro
mautictest.gtec.pro

Certificate

The complete raw certificate details for www.pressnsoft.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333326897169420682447940713265594751109656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-29 22:10:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-27 22:10:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pressnsoft.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 925657228129429976507901148837028119177420731946163815629324786376583607339162788699133429154049490867906254083952988143985176859690796145687198731699461195749908195449076683910244417368159636695584294187664156097019983109384403884838312028817897125558264072304781689496680963980483229319835903185338497885560444302156361758989622793976250433602467144321662014183424249118124549337227470066642809937295842879862471169630980657357003654831561307216671332822434456542174027079345831946682834690362132798936567570470413523246793639096460487449258689217241786926958550772318612095617309532758283709490277829092640213143274827508217770725496300375154028102960803967636702700636813291688294968959881259281495523389945038222646207067939346055129269530248518138648158405247820383161303436424472605106270830054245416628053403940124742019413922123413964943638827197032626880241382557279005197445715408916738281334850370452295519495209104331603675384314833590879096708410814277313111458387611942241440237169376408871533198764435468639633834895891224623366902459647786746758401241671451641361504883178035661018211763361448472496628957116771094345390177366129213360345072037915328218549466212768288571156893167699707910642821817457496869910800543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc46b6ce1fb7233fafd63ed475737342ba01f4a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtec.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabinet-gtec.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pressnsoft.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runrunmonkey.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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