www.daitauha.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:da:01:8f:e5:f1:2d:9a:72:6b:78:ff:c7:4f:5c:20:51:7b was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.daitauha.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:01:8f:e5:f1:2d:9a:72:6b:78:ff:c7:4f:5c:20:51:7b
Serial Number (int): 335520490174271780313631859790282722660731
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:2d:a9:2d:57:42:ec:02:31:20:96:c2:c7:1c:d6:64:84:64:e8:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 99:cb:9e:b1:ae:f6:fa:93:19:60:2f:55:ce:d1:d6:15:64:89:df:bc
Fingerprint (sha256): 52:2b:d3:07:19:ef:7e:93:66:14:82:e8:39:89:7b:da:01:a5:11:62:38:18:8b:bd:f7:d1:38:d6:43:6d:d3:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.daitauha.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.daitauha.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daitauha.fr
mathieu.daitauha.fr
www.daitauha.fr

Other certificates including the domain name daitauha.fr

(limited to 100 certificates)
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
xmpp.toniob.net
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
xmpp.toniob.net
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr

Certificate

The complete raw certificate details for www.daitauha.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335520490174271780313631859790282722660731
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 08:23:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 08:23:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.daitauha.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 607041541314531260678671597761450216774052495362612708302857845756259043819864939377891876517151481064918916393098912138528881084589481187228201611554442610769857856450541796279967711349679673298827403971541734538457884398554625082414879443329667865126066785276911013015904306642639722671233944635286706003995662888122308753182317346261140840073046942918334196565441831575948697222513830381568206657100770216313634862871434638389496281817211085838360656441743451043897412830288030712412741323144443003464164643273937047970958301498402129320187826383361381236686967217236288414888304979489092354294985681427310118464768800102604016926324391353295638339385185266112661641340234091619736096655340386232709857624036597539216366100866650877782940158539724416974439956354153295221959245189565781343763474971299987752363776781223779999981698243324763941714230079273958696089564381602118874352688267169865679864122427193264022883263150565051057312624466479307609886292072643934730827947497838238070467485022883701542222486650563624501366137364700137572031730288535383192614867768209863131541305832913356846129031377122373268843396575822475063294602469512021714455589537526148130129198783294237244253580244230052709624579830829353478595025639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c82da92d5742ec02312096c2c71cd6648464e896
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daitauha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathieu.daitauha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daitauha.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d29eee89a0000040300483046022100b6628d94e5b7daa66e1ed2ddeb5b3397570478c2494fdc85302b04e8b1effd44022100889df84fede17d54b7dbc54f5494c0202e6d1e7673a6c3dfbf48aebec961acab00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d29eee8b5000004030046304402202074965f7b06c369a0ac9e6ba5d6f4ecb7b1bf9b356bac61f02f8dce863f464c0220305efc8f2ef072ec817460048f1175b9f4db17c4845a5c2494002e27f2fe6b2c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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