shop-dev.kinepolis.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:17:c9:da:0d:aa:75:d1:15:d8:25:6f:05:40:0a:4d:42:ea was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop-dev.kinepolis.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:c9:da:0d:aa:75:d1:15:d8:25:6f:05:40:0a:4d:42:ea
Serial Number (int): 269431659259506828272104939319258065486570
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:44:e4:5a:84:26:8d:fb:3a:39:66:bc:e5:6a:f8:81:6e:a5:fb:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:83:84:fd:92:10:e6:c5:14:83:33:17:1a:2e:f4:37:7b:41:a7:26
Fingerprint (sha256): 3f:8c:e0:70:67:74:0b:7c:f6:ba:41:b1:79:78:02:0b:11:2b:86:6e:3e:2c:d3:ae:94:88:28:6d:af:64:53:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop-dev.kinepolis.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop-dev.kinepolis.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop-dev.kinepolis.be
shop-dev.kinepolis.es
shop-dev.kinepolis.fr
shop-dev.kinepolis.lu

Other certificates including the domain name kinepolis.fr

(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
kinepolis.biz
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
tickets.kinepolis.be
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.biz
kinepolis.fr
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.megatix.be
*.kinepolis.fr
tickets.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
shop.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.lu
*.kinepolis.fr
shop.kinepolis.be
kinepolis.biz
kinepolis.biz
kinepolis.biz
kinepolis.fr
kinepolis.lu
shop.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
shop.kinepolis.be
shop-dev.kinepolis.be
kinepolis.megatix.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
tickets.kinepolis.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
www.kinepolis.fr
shop.kinepolis.be
kinepolis.fr
tickets.kinepolis.be
kinepolis.biz
*.kinepolis.fr
*.kinepolis.fr
kinepolis.biz
kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
www.kinepolis.fr
kinepolis.megatix.be
kinepolis.megatix.be
shop-dev.kinepolis.fr
kinepolis.megatix.be
shop-dev.kinepolis.be
*.kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.fr
tickets.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.biz
shop-dev.kinepolis.fr
kinepolis.fr
kinepolis.biz
kinepolis.biz
shop.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
kinepolis.lu
kinepolis.biz
shop-dev.kinepolis.fr
kinepolis.biz
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.biz
kinepolis.biz
kinepolis.fr

Certificate

The complete raw certificate details for shop-dev.kinepolis.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269431659259506828272104939319258065486570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-31 09:52:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-29 09:52:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop-dev.kinepolis.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699626203012083511670575173535826979006973677788337525072716468258921632317591931920582283726050199804801687260102557632703648612290954140751507998844077660892211780356440912247534402435405139105959764592411336121661988894658553629756218644637866066626839060185664552394473380318397803372317558861565189408905091707768826078543473944804925228037840777238432086298930259362790694193429070899411597159561018260184257748788847027061550319164955182056403171756223267765437678495669380045914079776323617626707518911410499316399386382297197339788483343373363980191306082846807179743672088060198517826467701038639299829035692883344696588101917840306622909054853533534274922936419876540037515693127295886091361604044608672516851642051959136929327907049231062030673270988092078885094314144522431828005652963644144765771283942640600926049114573162737342888887998157006654392441004629649142132692511507271910189149168729423303879967555778188600244072308848029756633948927545956428494791839259780277514613055757330201296389563473191370231414419596838518294531198451017080586853298926109708647009303155082366868381986691614743259956570509459319774172511651159448162251002541038854135975334677757646244857917546588447087786242239140489920556191829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc44e45a84268dfb3a3966bce56af8816ea5fb0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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