www.diourbel.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:12:b5:32:ca:93:2a:0b:6f:b7:11:be:8e:8e:b7:e5:6e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.diourbel.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:12:b5:32:ca:93:2a:0b:6f:b7:11:be:8e:8e:b7:e5:6e
Serial Number (int): 341668363328447854742541028777253133608302
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:43:3d:c8:a6:72:0d:e2:ce:b9:bc:28:7e:44:18:74:d6:dd:b6:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:08:11:31:5a:12:a2:bb:11:71:8d:40:41:1f:62:b9:33:62:80:0a
Fingerprint (sha256): 4c:15:66:ac:99:e1:1f:ed:a5:dd:ea:1e:0d:df:e7:e2:e4:bd:0b:b6:b1:dc:8f:51:b8:31:c0:c0:51:97:65:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.diourbel.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.diourbel.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.diourbel.fr

Other certificates including the domain name diourbel.fr

(limited to 100 certificates)
linux.diourbel.fr
linux.diourbel.fr
linux.diourbel.fr
www.diourbel.fr
linux.diourbel.fr
fileshare.diourbel.fr
linux.diourbel.fr
www.diourbel.fr
linux.diourbel.fr
linux.diourbel.fr
www.diourbel.fr
diourbel.fr
www.diourbel.fr
www.diourbel.fr
www.diourbel.fr
linux.diourbel.fr
linux.diourbel.fr
linux.diourbel.fr

Certificate

The complete raw certificate details for www.diourbel.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341668363328447854742541028777253133608302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 15:56:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-27 15:56:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.diourbel.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717528066425735280133270785427298513727536244930035995588187715735956667824484829253043496980757980300048773034308214045165994379684388080566596701913262471001083911373565900996217405363239294936603960663728396657625355075392979735676500172275275292181482881377018370684385164983063273231935894674931473350082834570220112535478608906675534143639200141124521751698554949298529098170170197641123295842781999303767797567818627603500285629200854046436505464246511608096857000353190506483216334025208461798886616024332674455103094377602540564434141373296925267567586042689208956336144078709955382734372033406910308771019201478185973826784756218568639755761861129038153654817356155252525724821421957938289272429213445681550641383444839483094198167587480231196960984837051140716246759838882767583937746981734401541655599793159581928947239727569466991550117012079000215440537868318416459266865499777626763027933545874026460915551393128964769465899417963626628905925960643057897266541803639529255061194159963444528725025645142091045595151838058525318383053976770662429790722618356580849035911772963551052784542411667980719480709330457387421899719773003336076698388574413823494113317267132784749797621633870675825478351746422627903474129544857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50433dc8a6720de2ceb9bc287e441874d6ddb6e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diourbel.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000166211c11170000040300473045022100c8409a65efffe451d95c2bf30b702a8e2185fb880a401936872a9b3f3eda7ba8022030001b73584281a5106c3b3b74519f87859a77d5a1cbfcc2bb45698169c3b0ec007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166211c11b5000004030047304502200e5ad915c12ebeda90072a498d5fa3cbc63d722772a5d2aa750f4049dff8c211022100e3690cabe0d61f208867f8d404ed30166ddd123643daa32c111bfb828b8d9e5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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