ocontrol.fr

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 63:bd:67:b5:3f:fe:e7:8f:f1:e5:5a:3e:bc:23:ad:ee was issued on by ZeroSSL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ocontrol.fr

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 63:bd:67:b5:3f:fe:e7:8f:f1:e5:5a:3e:bc:23:ad:ee
Serial Number (int): 132577019137262061342067171499159301614
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 90:76:ff:cc:3f:43:22:e4:e8:c9:97:01:04:cb:99:d5:4c:93:f1:6a
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): b4:bf:6c:d7:9c:ac:84:b8:05:44:e3:fe:18:e3:ff:57:75:24:e6:86
Fingerprint (sha256): 42:12:29:33:18:3b:5d:30:04:2d:80:c2:16:81:e8:69:ed:21:08:a1:8e:05:e3:db:57:41:f1:7e:5e:ff:b5:06

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate ocontrol.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ocontrol.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ocontrol.fr

Other certificates including the domain name ocontrol.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for ocontrol.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM6v77Zat+AoH9kiVo6S
jYEl38DsiA6fZYzgU2Q049caHO3zb7ojokdx5grA5tbdIQXhGmSSveM7m3AVPuir
DHfuEhTcJoc0GazScVgfmtgziehpmaBWi3zRYmIyv22XzwtnUurnHiGtbBml50Ec
5k7h2Dig/80TAXbj1bZTnax3SZ5uMF/zNVp7UvsTWlAnJ+3H60+jmEYk/+C/zYyU
7K7P2mAmrZBXpC3HeWR8XQcuic+oZ8oPK667SswFQtmMpRZb/bvFy//bUjqyiJVl
DdLZHyRjK5zG8q5r2+gnYI1kmy6b2tNWHXSCXnb/Zps4I1uwaXkalS8fTkOux+Oe
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132577019137262061342067171499159301614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ocontrol.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21309956516655798394862344883797814719649267088526094900339838440512722240525890514336012572036307535969431210648155759220105002062280870512126972520847631534449202583491161911281746265858081484348555741774032013280224918200180724455599888885473061954387577513880162107167537931131148277788810629466312714964249474154701169004890444954142744511186729523695843735511437343783737317080006784523315323895985465940998540004978579042789971599901704543527893658889841867566277496468193324204771611142071207479712938211117162856788527073729887414900055805296878163365839661668295957408732044985872855422879553887515867061853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9076ffcc3f4322e4e8c9970104cb99d54c93f16a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c328d5d140000040300483046022100f376b18149896d52dbeb7e5e816d75031103fea70ee68058066f8ff39c60539b022100a3f3d2cea97df7f628a258496a5b47673c43cb61584aa9989d883891b15d1cd90076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c328d5de100000403004730450221008e3bd28b580403cf8939b2f2203f19947f803f2a1ff7ae49ea220e9eeee3994602206787c1166e3941ad16cd555a0e528755c3e954014a057fa86b139c0e575cc37e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocontrol.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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