www.exterieur-design.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:b8:02:f1:2e:f7:be:99:ed:b6:5d:31:17:0c:d1:98:b9:5d was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.exterieur-design.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b8:02:f1:2e:f7:be:99:ed:b6:5d:31:17:0c:d1:98:b9:5d
Serial Number (int): 323952724060887080091418376262663857027421
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:31:ff:63:9c:66:00:eb:1c:14:ab:3b:c4:fb:55:63:f9:21:6c:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:4f:38:26:a6:e1:9a:5e:33:e3:d5:66:a5:0f:75:ad:88:be:5c:7c
Fingerprint (sha256): 4c:8c:70:ec:ff:a6:4c:fc:fd:19:ef:72:b7:d6:d0:7a:7c:24:60:84:64:cf:02:5d:6f:bd:4e:9c:e0:bc:4b:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.exterieur-design.fr

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.exterieur-design.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alaplanc.cluster013.ovh.net
alaplancha.fr
braseroshop.fr
cocina-plancha.com
cuisine-exterieure.net
exterieur-design.fr
josper.shop
plancha-gaz.eu
plancha-pro.com
teppanyaki-inoxius.fr
warmwatcher.fr
www.braseroshop.fr
www.cocina-plancha.com
www.cuisine-exterieure.net
www.exterieur-design.fr
www.josper.shop
www.mainho-chrome.com
www.teppanyaki-inoxius.fr
www.warmwatcher.fr

Other certificates including the domain name exterieur-design.fr

(limited to 100 certificates)
www.teppanyaki-inoxius.fr
www.teppanyaki-inoxius.fr
www.exterieur-design.fr
alaplancha.eu
alaplanc.cluster013.ovh.net
alaplancha.eu

Certificate

The complete raw certificate details for www.exterieur-design.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVP5w23knWGupF/rOFmr
IckrlGtxiSAJ1yRaZ1meK/Rkhn9eaZmc22C27nQWBr3F20vsPhuBF8dnphf5fDvt
Q8PR3V5ZRvWHNLb8zwVTFQsnqsj/JlYVhVVpHBnlBQljH/WuJcP3M2Oz/fQozII/
NQJiskqYKmQoRUpqkwNuUAvroErjvzhUjsVe7JxTmNfMHS0Nvar88jPOdUkMdTRd
8gUaqD+BDpTD+ihXG1jVafKtYcrIDZ8QN/16ao42Fmp7hwIxWrhZ8DdUZs6LTfnW
PzMoaoFVI0h9aCs0urPQsM72YDHWQ1fzWyGXfw62aGJtqFPqA5UVUim7V9SamHhT
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323952724060887080091418376262663857027421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 07:45:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 07:45:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.exterieur-design.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22385589909589604677401252009172589533530140677321941448182953688841473344598077341258495662408880183253360677611590654935026240832126744798010585032360040394192590438897894631383445325777648505767320549029377020302946146031743076919705324174080339859673639720408080349124149744918650434294375003699555601437821468130888904769621498479591555524876192361865378826515216841672468633352915147148380977053942143639432007342251487957664999569606723029752129068029245381683165333195150464877915830715773979554565862073243599746283484039029135596650181083642060337535382892395692040850141509412251008639827399942409603797869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7531ff639c6600eb1c14ab3bc4fb5563f9216c40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (398 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaplanc.cluster013.ovh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaplancha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braseroshop.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocina-plancha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuisine-exterieure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exterieur-design.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josper.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plancha-gaz.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plancha-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teppanyaki-inoxius.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warmwatcher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.braseroshop.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocina-plancha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuisine-exterieure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exterieur-design.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.josper.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainho-chrome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teppanyaki-inoxius.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warmwatcher.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df930de1c000004030046304402203e5a9b7ffecc1230bd6dd26eef5addbd3874a03fce1d2680dc1577bef1decd21022079a4cc606bdf3831a6753e5b28416aa4579596f5a6e6ca6c9e7988c6cd9d2bae00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018df930de6e0000040300483046022100fbc4801bdaab0f1b347214a0ba6080e6bc14cbb58991ab0d7e6b52052a63f78f022100bf06015ec69a6fc0d1e3e9d28d2762e7e6ed73a8721017c31d5054ac23305a34
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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