www.compagniesdecreation.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:e0:00:72:97:eb:5e:8b:b6:e2:84:58:bf:da:db:81:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.compagniesdecreation.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:e0:00:72:97:eb:5e:8b:b6:e2:84:58:bf:da:db:81:e0
Serial Number (int): 312676962228708321246970316385596898771424
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:af:25:02:b0:61:6a:36:a1:7c:6a:04:e9:8c:97:bb:ac:2f:ca:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:a2:35:8e:8b:96:74:e6:b7:b2:18:12:96:eb:82:c3:4b:3c:89:a2
Fingerprint (sha256): 55:3d:5e:5d:95:bc:59:b3:54:0f:9c:9b:15:dc:fb:72:b8:87:38:0d:90:e0:5d:bd:24:e9:21:f0:69:1d:c8:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.compagniesdecreation.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.compagniesdecreation.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.compagniesdecreation.fr

Other certificates including the domain name compagniesdecreation.fr

(limited to 100 certificates)
parolesdecirque.fr
compagniesdecreation.fr
helpcenter.moovly.com
help.plurico.com
sni.cloudflaressl.com
intermittence.fr
mail.intermittence.fr
www.mail.etats-genereux.fr
compagniesdecreation.fr
evenements.compagniesdecreation.fr
observatoire.compagniesdecreation.fr
compagniesdecreation.fr
scenic.guiding-group.com
compagniesdecreation.fr
sni.cloudflaressl.com
www.intranet.compagniesdecreation.fr
www.compagniesdecreation.fr
compagniesdecreation.fr
compagniesdecreation.fr
www.compagniesdecreation.fr
compagniesdecreation.fr
sni.cloudflaressl.com
www.etats-genereux.fr
www.observatoire.compagniesdecreation.fr
www.compagniesdecreation.fr
support.adomik.com
compagniesdecreation.fr
www.compagniesdecreation.fr
support.etoh.digital
seminars.investacademy.net
parolesdecirque.cirquedecreation.fr
synavi.fr
parolesdecirque.fr
compagniesdecreation.fr
www.compagniesdecreation.fr
compagniesdecreation.fr
www.compagniesdecreation.fr
etats-genereux.fr
support.casadomus.de
compagniesdecreation.fr
compagniesdecreation.fr
compagniesdecreation.fr
compagniesdecreation.fr
ayuda.paseandoporeuropa.com
etats-genereux.fr
syndicat-scc.org
cirquede.cirquedecreation.fr

Certificate

The complete raw certificate details for www.compagniesdecreation.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312676962228708321246970316385596898771424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 22:35:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 22:35:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.compagniesdecreation.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873556292484162178760041374842246834703045021975576754019907510477483491069708858568313497864989699160162005142491433594729220333436285611646060413964547032652449530775676829727555498723234375385971988048096582620257222286535564274553782072209987505569969960174958410635057490083051826817714788501805448681789968585874137045338515907262547948521663642503102479982687714173430936994561894966536317757795809746793022709392767365722952865265576967209512951435722597250151141724514489226603079052770646493865901781251099254867181064980436077884805669920733174814193946122275237421589075595058213362234391715940325653313872047716564511692142311590611287854513645800446599111993859635416889530594575802129413913255315325538324527736588283266578777679172649705740505650549760521159132743791149724112190134829670194851283057894860938254045640836396377299489670206187184903329930826184407230271763563779872175313536434954445985437679678674624301802322409157708941072760094608268920862683582953676618685401674887815077776274595545118189110437937077271537376535031192643080167822809858160725710592407476929948689127600655273039749738403207700049404024731554180354868580333856450124596364469913360566218099183722066502760999721566465375808188593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4eaf2502b0616a36a17c6a04e98c97bbac2fca6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compagniesdecreation.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ebeab1d4e0000040300473045022100f925bc3e017d54eae4c4e88c8ab7a916d5a034eee52033c28ff81bfff04f3fc102200abf551ee7a43ca9ba5db2029d3df76dc0b799eea69bb211c6e99d637799ca650076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ebeab1d83000004030047304502203b49d5a43cb822aaa0ec02bb4bc2180d3a65b2e17a924204c6af0121b530dafa022100a8bac75dff8ad3a88a69cffc1fbcaa60b522d17228ccf8ba2df218910ec34efd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007f40de90d4ff32cf9187684a96af98ad47d96253ceec409cb1a4d3343612ba799d4a8b7615bd31156258d6fd1091d4e09183e6eb4d2437dccee9fec2c0c55ecf82b04d5b064172b085d3d1d989515e5ce6a358ea7c46fa0fb249b4f4f99c710e7408821b158c654105e74a0387ea3ba0098e40af3a2e6c45274ca5becd3fda7f00521783194943f56dba1f876ac638b4a71e79d09d645af4f09c355fc7d06b2d2699defb0ab627eab857b6e92f78cbc52494e6955fdbe6c6e011ec55f138554fad7f2d97185f189d866951d40a8d889dca98f93e5ca289808582e4645505354b8eea1ec183c04d0347116ec010a9c4b9e86d319c336a204aa7ab31c313adfdb0