livreblanc.mariefrance.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:99:d2:17:38:8f:b3:ae:e8:8d:d8:c4:6c:97:b8:7b:99:6b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=livreblanc.mariefrance.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:d2:17:38:8f:b3:ae:e8:8d:d8:c4:6c:97:b8:7b:99:6b
Serial Number (int): 313679318383327077796202881527391213820267
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:9e:2b:e4:44:ce:c5:b2:31:f4:92:10:78:ce:a7:3d:89:0d:b6:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:5d:68:67:d5:4d:70:7b:9d:4c:7c:04:47:c2:51:fd:71:14:73:16
Fingerprint (sha256): 49:88:47:c3:95:59:39:42:28:27:70:f3:fa:41:8d:61:f9:07:70:50:e8:f7:51:68:a5:01:53:36:5b:97:b2:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate livreblanc.mariefrance.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livreblanc.mariefrance.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

livreblanc.mariefrance.fr

Other certificates including the domain name mariefrance.fr

(limited to 100 certificates)
abonnement.groupemarieclaire.com
livreblanc.mariefrance.fr
livreblanc.mariefrance.fr
sni221250.cloudflaressl.com
ssl276960.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni238301.cloudflaressl.com
sni172098.cloudflaressl.com
sni221250.cloudflaressl.com
ssl374745.cloudflaressl.com
sni221250.cloudflaressl.com
ssl392171.cloudflaressl.com
ssl374746.cloudflaressl.com
sni172098.cloudflaressl.com
sni221250.cloudflaressl.com
ssl276959.cloudflaressl.com
ssl389436.cloudflaressl.com
sni.cloudflaressl.com
nla.mariefrance.fr
nla.mariefrance.fr
sni87554.cloudflaressl.com
ssl6538.cloudflare.com
p19.base-deal.eu
nla.gala-news.fr
sni221250.cloudflaressl.com
p19.deal-envoi.com
ssl6538.cloudflare.com
sni221250.cloudflaressl.com
ssl374745.cloudflaressl.com
sni238301.cloudflaressl.com
ssl392170.cloudflaressl.com
ssl392171.cloudflaressl.com
ssl276958.cloudflaressl.com
ssl392170.cloudflaressl.com
nla.mariefrance.fr
sni238301.cloudflaressl.com
com.mariefrance.fr
sni221250.cloudflaressl.com
sni172098.cloudflaressl.com
sni.cloudflaressl.com
sni221250.cloudflaressl.com
sni172098.cloudflaressl.com
ssl276960.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni238301.cloudflaressl.com
p19.fichier-mailody.fr
ssl392169.cloudflaressl.com
mariefrance.fr
ssl276960.cloudflaressl.com
ssl390166.cloudflaressl.com
ssl276960.cloudflaressl.com
ssl392171.cloudflaressl.com
sni238301.cloudflaressl.com
ssl276960.cloudflaressl.com
em.auto-moto.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni238301.cloudflaressl.com
ssl276958.cloudflaressl.com
squad.leservicedesastuces.fr
nla.mariefrance.fr
ssl374744.cloudflaressl.com
ssl392169.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
ssl276960.cloudflaressl.com
sni.cloudflaressl.com
sni221250.cloudflaressl.com
sni172098.cloudflaressl.com
mariefrance.fr
ssl6538.cloudflare.com
qualifio.mariefrance.fr
sni221250.cloudflaressl.com
sni238301.cloudflaressl.com
ssl276958.cloudflaressl.com
sni221250.cloudflaressl.com
ssl392170.cloudflaressl.com
em.auto-moto.com
ssl374746.cloudflaressl.com
ssl276960.cloudflaressl.com
sni221250.cloudflaressl.com
livreblanc.mariefrance.fr
sni172098.cloudflaressl.com
sni.cloudflaressl.com
ssl392171.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
ssl276960.cloudflaressl.com
sni221250.cloudflaressl.com
sni172098.cloudflaressl.com
ssl276960.cloudflaressl.com
ssl6538.cloudflare.com
ssl6538.cloudflare.com
sni221250.cloudflaressl.com

Certificate

The complete raw certificate details for livreblanc.mariefrance.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAn+wZUhcfUo0EBO6jqovh
hIJO/unR6PcDAoq6nA5sYiJ9SAnBBdR006rj9rzyPdm+qNHiodYAEOumcuLQgW6H
W2D1k+xCPjYtn3lv09hWV2jnUi240/T0bq+H1BYANnDVQcd5L3KtUI/ooKwUWemN
29ZpoW8/PiwXnvIeOleMuY8ne50d0PJ4yNqK49NL6J9mfCo8YRCs+/GJStu2R/bh
69FD8wtX1ytYyD9hDfExCwZmNFVn/8N2CxchZKhlXDeRwJW10zvu3cQaz5mUF15S
31XBL8F13E9ZlVf20YFHDd/4TactNpzXSDEuXMB7FPCsy90DL6ipninYX+pN1T3R
5UgbVBRyB5ynW+gCrPccLo6QCLqLKZn8rSiGEiyKuvKaSS0yjONXK9Q50sipYTW0
eXcJDmGz2uAUb+fcMMS6pOElZ1PWEyvfyFzPMhFaNb0a6lDvuXdxWEcdxWDDK5Ts
qYXGbpv2qp8IllcbYNRG/brpj9fdCe+86PEPsS5uI6hI5/3c1g/hlEPtKMhcqk83
LuzIF8H4b17axdyMfiLaBBUmJ1+Mtgx5594qjGxOtFMh1Wh1fTEyXx+uW6tPljr0
FRheHhOy5UXoNYoxRsifzUR5OCo0JtVyyDge11Z07+6YeR+OQBdllhx+I34M5Kvr
YzUk/32u8RJsbSvKxXDm19cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313679318383327077796202881527391213820267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-04 13:08:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 13:08:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livreblanc.mariefrance.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 652425904912666794821397577004901425722781139821857291354820044147270397285238606139455101639121037756383502224585445003499094465019218656752131642828257726654357731409748311293706047186430509046709943148154670734919971289039605728842317326249086542286509446638644568429961765847061230211299877002931806668547632115184642264003768804369468389769115640992817868064759889506520968797977415063478760072908135158861418302054443597805723597380049187808439176705784847537567674649814962357438584633993877368440713487859256587464902228054887417891344651679100142611472337191753733174926313174457708742586638606234159075002008293785214123546652770983475528115220317996215917382819521340086406792063990901378229387659006807383152273485343815561845122397928834081094657942964673774290337558235609409276324893288602228175484539320464140793790337876451596929838340583292643393694980013563372131796312214264095908458303605327966972117882605188059323718145455259315759089944134112101365988553311761730989223810527716979504351815192145316340979658198804353002419061454741080576665104073400430800195600745261421180552195233656176711319589245250376655046746575731686071516297965667044337603884059956748895368650481238674898234675049984272591137200087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e99e2be444cec5b231f4921078cea73d890db648
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livreblanc.mariefrance.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a832c8b59000004030046304402206a30f562b25ee4ce6132a8784c85a1082e6879571f28204105205c5bc18b622302202a4a0cc6c6dbfbc2138427e2241468aec9af18454715096af7f700394108f0c8007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a832c8ad30000040300483046022100d6366930ec0b165157d6cbc8cf5bd623d050eb878b077ce985f5cf1e4ce0811e022100a5215ef4642edbeaacfe6bfe90f4097c9861f16c2b4ef85be5e6baea803d24b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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