confrasie.auf.org

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number e3:38:f2:0c:6e:0b:13:cb:f7:75:18:6b:a0:c7:2d:28 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=confrasie.auf.org

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): e3:38:f2:0c:6e:0b:13:cb:f7:75:18:6b:a0:c7:2d:28
Serial Number (int): 302030432995172630123623681952540208424
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9c:eb:8f:cc:58:42:5d:ee:f9:03:4f:08:f1:40:ee:75:89:5d:13:51
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 56:ec:30:b6:8d:fe:83:b5:8c:02:e8:1d:31:c9:34:b7:01:84:f2:8f
Fingerprint (sha256): 44:46:d8:17:a3:70:95:5c:0f:66:d1:75:67:e6:82:8f:f7:e1:ba:b1:1d:85:9f:05:9c:d6:1a:0a:90:6a:cf:18

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate confrasie.auf.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for confrasie.auf.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

confrasie.auf.org
www.confrasie.auf.org

Other certificates including the domain name auf.org

(limited to 100 certificates)
mooc-certice.org
pypi.auf.org
carrieres.bg.auf.org
ag2017.auf.org
mooc-certice.org
ag2017.auf.org
2017.colloque.auf.org
2018.colloque.auf.org
colloqueannuel.auf.org
piwik.auf.org
www.colloqueannuel.auf.org
frontal.auf.org
mooc-certice.org
esfam.bg.auf.org
conventions.auf.org
prototype-index.auf.org
frontal.auf.org
prototype-index.auf.org
coda.auf.org
2017.colloque.auf.org
listes.cm.refer.org
apprendre.auf.org
2017.colloque.auf.org
esfam.bg.auf.org
foad.refer.org
mooc-certice.org
esfam.bg.auf.org
apprendre.auf.org
listes.cm.refer.org
2017.colloque.auf.org
*.auf.org
2018.colloque.auf.org
2017.colloque.auf.org
redmine.auf.org
redmine.auf.org
listes.cm.refer.org
listes.cm.refer.org
sirh.auf.org
wcs.auf.org
*.auf.org
listes.cm.refer.org
www.eg.auf.org
2017.colloque.auf.org
foad.refer.org
2017.colloque.auf.org
colloqueannuel.auf.org
esfam.bg.auf.org
fad.eg.auf.org
brazza.cm.auf.org
colloquesofia2019.auf.org
coda.auf.org
carrieres.bg.auf.org
foad.refer.org
foad.refer.org
2017.colloque.auf.org
ag2017.auf.org
2018.colloque.auf.org
2017.colloque.auf.org
colloqueannuel.auf.org
2018.colloque.auf.org
scodoc.bg.auf.org
colloqueannuel.auf.org
mooc-certice.org
cru-eco.auf.org
www.eg.auf.org
colloqueannuel.auf.org
2018.colloque.auf.org
colloqueannuel.auf.org
esfam.bg.auf.org
api-apprendre.auf.org
www.mooc-certice.auf.org
id.auf.org
assistance-informatique.auf.org
www.colloqueannuel.auf.org
*.auf-semaine-francophonie.auf.org
mooc-certice.org
cru-eco.auf.org
carrieres.bg.auf.org
www.eg.auf.org
2018.colloque.auf.org
foruminnovation2019.auf.org
moodle6.eg.auf.org
foad.refer.org
2017.colloque.auf.org
mooc-certice.org
prototype-index.auf.org
assistance-informatique.auf.org
listes.cm.refer.org
www.ongolafablab.cm
2017.colloque.auf.org
confrasie.auf.org
foad.refer.org
colloqueannuel.auf.org
annuaire.auf.org
2017.colloque.auf.org
preprod-authshib.auf.org
colloquesofia2019.auf.org
moodle7.eg.auf.org
www.eg.auf.org
2018.colloque.auf.org

Certificate

The complete raw certificate details for confrasie.auf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoIWSC/U6C5LAosqtXhZ
d319S5i7gm36ogZnAQsgNwabIkhs/Ya55ZEhzLqO9HukzQn5RjAnL5ilTjCiHg5t
cpF6auDASDOLzzbELbPtS/nX36OZy8LuXjfBO0vpNAZIhu+11sbWVIxtLLtRAcPy
Hj8ltoVCYqcKPgQQ+aC/MOxQE7d//4HMRthzJQIjjPETbynpoRS7+0E7jJqb47Dg
wOQKUbZMj7GqFcDuxonmbmAnQyl7UOH0vD3w5ylJLDoyMfubNtcPkd5wOSCCVZoI
kZLiAxSCvGk4zC9RLPjuhrmjmIXozrOuLc54zIaC7Jiu8L3lnxFI9HNII+Fxf1Ip
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302030432995172630123623681952540208424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'confrasie.auf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22534566593721593991155942043290856100605425949354532619654856975186785203002004884211294966161096867784942484557662780026548303094034879141924134142711094909238186470640742354424918935936492154670964179299140863074015486816748569653731214895525942800698115876017452515482587484951211955601457846673132342557591167979452000800203932822403928671039532728018181746119474652962336724259233459499670580913119347027193356419452801773159432909664059864940618405449219959931978416433250075710287147136803098564276389783610157168336663968431226425760797340484925222601028631183147961088771934315939602801633097018701448882621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ceb8fcc58425deef9034f08f140ee75895d1351
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confrasie.auf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.confrasie.auf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a31490c9e0000040300483046022100f1fca43bdc73d24397eeab46d3d2dcc492452f51dfe9313903c3712c8e6869bf022100ab99b61ce713ce405a6cdd9deaad0939d8c586818160bbf2005adaa7a87ca022007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a31490cc6000004030048304602210089116fe39d986ee359b7e53e3c87890e13cae9a8229f7771bf3f808c65f4ad5f022100ded5069e45ca57c515ff7599d8ddb18a210c4c3abea50709d1d266ab5c27e5e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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