surfing64.fr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a5:50:f5:c4:68:13:6d:bd:f0:76:3c:8b:7c:3b:54:33:ba was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=surfing64.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a5:50:f5:c4:68:13:6d:bd:f0:76:3c:8b:7c:3b:54:33:baSerial Number (int): 317591062673226744816204644702552467977146
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 8e:cc:19:b9:8f:e9:19:29:b4:e2:e7:5b:9c:8f:fb:4b:75:ae:a0:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 03:dd:3a:86:6e:45:4d:ad:6a:9c:c3:e9:54:33:55:75:97:d2:03:32
Fingerprint (sha256): 43:af:6f:30:52:74:ff:1f:4f:a9:38:bf:10:58:1a:c7:e9:67:b6:69:e6:7e:2d:76:64:3a:ad:9d:a5:d1:c2:b3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate surfing64.fr
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for surfing64.fr
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
new.surfing64.fr
surfing64.fr
www.surfing64.fr
surfing64.fr
www.surfing64.fr
Other certificates including the domain name surfing64.fr
(limited to 100 certificates)
Certificate
The complete raw certificate details for surfing64.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgISA6VQ9cRoE2298HY8i3w7VDO6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTgwMDU1MzFaFw0y MDA2MTYwMDU1MzFaMBcxFTATBgNVBAMTDHN1cmZpbmc2NC5mcjCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBALOvJWSYHfRPNaqemi9cfscCvS1VhlNScjAL Ez6yyNwsK0apfhZNA0ff4B7q0Op/cFNuKuIOpCEHcvgpK5E5DBRCy7yHbSUY8wgf y5oGgePzYaTiSQLDpuiw11TCJ8eFxfixc38Nn+gonfjhfpP+cAEqn/UQ9UQWdnNg LLr8P4l3A3Tb8eKyQmfQFKKQh8qdrxbotInmKDw53NvZ4XU1DuK+plbGmLUUrIzT BsaFPOrv0TrmRBEvvupAGvIn+2oWA36pb2qJLE2wPCajIMWHHd2MnUnMc7sVKJNP ZEwYg2vFMQWfJGuSLycLyPO/tZ+crfg/wYjKE2A78n6jo4xUgZn34gPw+ok8BYNL 4KP60aiEtdofF1KPFFcRigZUzI4q6RAJdrj443UgvVyw8XwJQGcfg1HAGbGcWyf7 pJHtI1D7PTTMmiRAUAnnlotjK53Rr8vJL1xJ7Fx5ods5I8WYIjUd6hL2uDO7Ttev EjrohZvaqJf06ZJOgJexvCrE1d8L8MxK4PQT3raVmNeOjm7rrx60HyT912Ju7S1T FcFM5yDcWgwUdnr6pbBF9RcJL7nDXhN3f3fjcZdheSA6YIochveWGhSylDTidAvV vlsFGKomNplBE38M4laZLjPTCqVu/HjBjwI1LkzIUypYYT65oEeaLzXQeObpMwh8 9NcfWZa/AgMBAAGjggKFMIICgTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFI7MGbmP 6RkptOLnW5yP+0t1rqD5MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wOwYDVR0RBDQwMoIQbmV3LnN1cmZpbmc2NC5mcoIM c3VyZmluZzY0LmZyghB3d3cuc3VyZmluZzY0LmZyMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAsh4FzIuizYog Todm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFw61pY/wAABAMARzBFAiEA0NDAfTYd kAvM94+656hrcWtEoshqCz+dYJv5PrqmuiwCIDoALxBQfnhy5J8I7LYAMcmDHo21 QnGEeLk/43qcqKIMAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMA AAFw61pZMwAABAMARzBFAiBxe+nQFqrG9RHH6CvCUbPrQ+IcS5TuwCwISkXt22pL YwIhAMp5AxMruLO8DwXkVERp2mb0XocjwDoCcFpaiANIdn8qMA0GCSqGSIb3DQEB CwUAA4IBAQAoGCOVdh0oGFcI8ALdp6N0Di4VurySm6FepwfEVh2u7PucfiJ1Q5gg /XadkcHxGh6CJBFmxlYxkV6cq5a7ZEq94OvjouFWoWemJJMe5Ii6tklMPpkQ3rPU lyf0qxBQhkrldArB7Isgsw2BjYoNtgOsnWrWZMJZ4vatrZ8SEz3oc2ct5LHT3zxB VHc+55CAK593gAxEb3DeXHZbVyBtdHYBeLXZzbkL5m8BHOtoq6+KCQdgmdUXtzam MpqmjyhL60OoZCV6+0SEe4fJgCioqIbFLvyri/CnbOnjaPhYcvB+XUg8xdWkyERs S84RCg00zarvcNck234J3nqfUkfqnpAb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs68lZJgd9E81qp6aL1x+ xwK9LVWGU1JyMAsTPrLI3CwrRql+Fk0DR9/gHurQ6n9wU24q4g6kIQdy+CkrkTkM FELLvIdtJRjzCB/LmgaB4/NhpOJJAsOm6LDXVMInx4XF+LFzfw2f6Cid+OF+k/5w ASqf9RD1RBZ2c2Asuvw/iXcDdNvx4rJCZ9AUopCHyp2vFui0ieYoPDnc29nhdTUO 4r6mVsaYtRSsjNMGxoU86u/ROuZEES++6kAa8if7ahYDfqlvaoksTbA8JqMgxYcd 3YydScxzuxUok09kTBiDa8UxBZ8ka5IvJwvI87+1n5yt+D/BiMoTYDvyfqOjjFSB mffiA/D6iTwFg0vgo/rRqIS12h8XUo8UVxGKBlTMjirpEAl2uPjjdSC9XLDxfAlA Zx+DUcAZsZxbJ/ukke0jUPs9NMyaJEBQCeeWi2MrndGvy8kvXEnsXHmh2zkjxZgi NR3qEva4M7tO168SOuiFm9qol/Tpkk6Al7G8KsTV3wvwzErg9BPetpWY146Obuuv HrQfJP3XYm7tLVMVwUznINxaDBR2evqlsEX1FwkvucNeE3d/d+Nxl2F5IDpgihyG 95YaFLKUNOJ0C9W+WwUYqiY2mUETfwziVpkuM9MKpW78eMGPAjUuTMhTKlhhPrmg R5ovNdB45ukzCHz01x9Zlr8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317591062673226744816204644702552467977146 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 00:55:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 00:55:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'surfing64.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733047435089636717790425299389632240490093577065541279388987689947334867458894568514714055283434174813849709566018779335909310124213914844626554058861937128197736298137776438535583246819166710058585962435103233816447088919561343099883674484158249755781506671088501558537821285584339496490091003596978578671588066654407606974452718057676852477155787692913679957205687584524936306685543870399248029087481522730332211249190302487188330082361342026997956666992473157144009701378144912926624890423998298151759801733350257867853057384182785128321620709417295710471955634257078941631373275597550497841028976980862697743627232892852995932255137354003224570464203901495524861683396814552961366119583830116798338031755640449405202074969858056025356698382530186980993412814303291283745442308102403862217760004897685510657875366073110184686056696774283386781931313664272699853508582215473260652247380608482936799728127476933978411517639090583446123033542324818584410900796389536144477532713582407908977660329080458122880520334226626411250271469704511793410800377794969923302298643053399023517001805760512627131929149116134570446337756592148775521545484856560351682071684457277274650224277571651907683246421005492852515381825163402380525585405631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8ecc19b98fe91929b4e2e75b9c8ffb4b75aea0f9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.surfing64.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfing64.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfing64.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170eb5a58ff0000040300473045022100d0d0c07d361d900bccf78fbae7a86b716b44a2c86a0b3f9d609bf93ebaa6ba2c02203a002f10507e7872e49f08ecb60031c9831e8db542718478b93fe37a9ca8a20c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170eb5a593300000403004730450220717be9d016aac6f511c7e82bc251b3eb43e21c4b94eec02c084a45eddb6a4b63022100ca7903132bb8b3bc0f05e4544469da66f45e8723c03a02705a5a880348767f2a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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