surfing64.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:50:f5:c4:68:13:6d:bd:f0:76:3c:8b:7c:3b:54:33:ba was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=surfing64.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:50:f5:c4:68:13:6d:bd:f0:76:3c:8b:7c:3b:54:33:ba
Serial Number (int): 317591062673226744816204644702552467977146
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:cc:19:b9:8f:e9:19:29:b4:e2:e7:5b:9c:8f:fb:4b:75:ae:a0:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:dd:3a:86:6e:45:4d:ad:6a:9c:c3:e9:54:33:55:75:97:d2:03:32
Fingerprint (sha256): 43:af:6f:30:52:74:ff:1f:4f:a9:38:bf:10:58:1a:c7:e9:67:b6:69:e6:7e:2d:76:64:3a:ad:9d:a5:d1:c2:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate surfing64.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for surfing64.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

new.surfing64.fr
surfing64.fr
www.surfing64.fr

Other certificates including the domain name surfing64.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for surfing64.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317591062673226744816204644702552467977146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 00:55:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 00:55:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'surfing64.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733047435089636717790425299389632240490093577065541279388987689947334867458894568514714055283434174813849709566018779335909310124213914844626554058861937128197736298137776438535583246819166710058585962435103233816447088919561343099883674484158249755781506671088501558537821285584339496490091003596978578671588066654407606974452718057676852477155787692913679957205687584524936306685543870399248029087481522730332211249190302487188330082361342026997956666992473157144009701378144912926624890423998298151759801733350257867853057384182785128321620709417295710471955634257078941631373275597550497841028976980862697743627232892852995932255137354003224570464203901495524861683396814552961366119583830116798338031755640449405202074969858056025356698382530186980993412814303291283745442308102403862217760004897685510657875366073110184686056696774283386781931313664272699853508582215473260652247380608482936799728127476933978411517639090583446123033542324818584410900796389536144477532713582407908977660329080458122880520334226626411250271469704511793410800377794969923302298643053399023517001805760512627131929149116134570446337756592148775521545484856560351682071684457277274650224277571651907683246421005492852515381825163402380525585405631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ecc19b98fe91929b4e2e75b9c8ffb4b75aea0f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.surfing64.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfing64.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfing64.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170eb5a58ff0000040300473045022100d0d0c07d361d900bccf78fbae7a86b716b44a2c86a0b3f9d609bf93ebaa6ba2c02203a002f10507e7872e49f08ecb60031c9831e8db542718478b93fe37a9ca8a20c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170eb5a593300000403004730450220717be9d016aac6f511c7e82bc251b3eb43e21c4b94eec02c084a45eddb6a4b63022100ca7903132bb8b3bc0f05e4544469da66f45e8723c03a02705a5a880348767f2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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