doc.cri.epita.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:75:14:22:fa:12:12:4d:69:2b:56:79:cc:55:78:32:6c was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=doc.cri.epita.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:75:14:22:fa:12:12:4d:69:2b:56:79:cc:55:78:32:6c
Serial Number (int): 342139402986401721643500462718073485931116
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:e3:9a:0f:3d:18:62:81:86:95:9c:d2:14:02:c7:99:fc:e2:57:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:25:0e:d8:7f:59:b7:55:ad:fa:19:26:18:0b:81:b0:7c:76:b2:81
Fingerprint (sha256): 58:0b:01:29:45:aa:c5:7f:20:21:25:2d:ee:c9:69:83:41:17:2b:51:4e:5d:b9:1a:d5:85:09:10:cb:c7:9b:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate doc.cri.epita.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for doc.cri.epita.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

doc.cri.epita.fr
doc.cri.epita.net
rtfm.cri.epita.fr

Other certificates including the domain name epita.fr

(limited to 100 certificates)
git.acu.epita.fr
web.epita.fr
lse.epita.fr
lse.epita.fr
lse.epita.fr
tips.assistants.epita.fr
sigl.epita.fr
lists.lrde.epita.fr
acu.epita.fr
synergie.epita.fr
gitlab.cri.epita.fr
tips.assistants.epita.fr
epita.net
assistants.epita.fr
toulouse.epita.fr
owncloud.srs.epita.fr
acu.epita.fr
wiki-prog.infoprepa.epita.fr
scrooge.acu.epita.fr
intra.tcom.epita.fr
lama-corp.space
srs.epita.fr
cri.epita.fr
cri.epita.fr
git.srs.epita.fr
srs.epita.fr
acu.epita.fr
static.acu.epita.fr
intra.acu.epita.fr
intrachievement.acu.epita.fr
logement.epita.fr
epita.fr
algo-share.infoprepa.epita.fr
static.acu.epita.fr
git.srs.epita.fr
tips.acu.epita.fr
assistants.epita.fr
bubuntu.net
mail.mti.epita.fr
lama-corp.space
lists.lrde.epita.fr
fic.srs.epita.fr
assignments.lrde.epita.fr
www.lse.epita.fr
lists.lrde.epita.fr
algo-td.infoprepa.epita.fr
synergie.epita.fr
lse.epita.fr
chronos.mti.epita.fr
infoprepa.epita.fr
algo.infoprepa.epita.fr
www.lrde.epita.fr
wiki-prog.infoprepa.epita.fr
web.epita.fr
teamcity.lrde.epita.fr
pantheon.acdc.epita.fr
chronos.mti.epita.fr
rendu.infoprepa.epita.fr
synergie.epita.fr
tickets.cri.epita.fr
keycloak.assistants.epita.fr
intra.tcom.epita.fr
chronos.mti.epita.fr
intrachievement.acu.epita.fr
wiki-root.mti.epita.fr
srs.epita.fr
tcom.epita.fr
lse.epita.fr
lse.epita.fr
lists.lrde.epita.fr
defenses.assistants.epita.fr
www.lrde.epita.fr
tcom.epita.fr
assistants.epita.fr
gitlab.lrde.epita.fr
gitlab.lrde.epita.fr
intra-defenses.acu.epita.fr
lists.lrde.epita.fr
tcom.epita.fr
lse.epita.fr
fic.srs.epita.fr
git.srs.epita.fr
cri.epita.fr
lse.epita.fr
assistants.epita.fr
assistants.epita.fr
algo.infoprepa.epita.fr
tcom.epita.fr
gitlab.srs.epita.fr
prospect.epita.fr
gitlab.lrde.epita.fr
static.acu.epita.fr
photos.cri.epita.fr
git.acu.epita.fr
photos.cri.epita.fr
sni.cloudflaressl.com
chronos.mti.epita.fr
dsi.epita.fr
nas.tcom.epita.fr
static.acu.epita.fr

Certificate

The complete raw certificate details for doc.cri.epita.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlT5WNp8j+mv4FBfYtZu
iniG/Bs0HYVtpVP5HSGQNOiAzprt5Dht2giN70YSY07ye8vZA0r92N/bJLqeefef
pwDMtKj8juS+APCFQBsPBjaj+viVfREZThdPDkNmCiqkJcWSLcWnjceuI9Esi0QF
NMsnpEcPXDrZdmvkNtfd3Yk8b0C8mcen7t716b8JTgsazZERIRjvU3EvRgUTa6y8
Twgnlitess0ZPbv+zVPNZngXcjYaq1Su2EtHcK5wRt1K0b6nTsQvMsnZBdMBuwaW
7vQbqtMXn8VHg1vBjIj0+l9wMBzv0o2dtOXixgqvD+ym4qAfsS4gLELOC5rjPoPW
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342139402986401721643500462718073485931116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 21:35:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 21:35:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'doc.cri.epita.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22007367311152342042598986584719423534688691917129184751094602589703641944057188119717078275766825947809423002269711967630268721092793064490114681112349164761682026231694514898047503155259007318944203656183259893190799109534536636732111134226190497777030095852503488098049264518258362350159740667575725131788014994199898192378348020723359847251174894719715633860303177195108921609206007523042054518875087052472153175900546725903896739540254655192328408557657636223474480957372656631383639210799905079063053476481323359086846899318463312347907219401061336279504310256462915763547082676991089452952466823543512027616811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20e39a0f3d18628186959cd21402c799fce25754
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.cri.epita.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtfm.cri.epita.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bd8e03e6400000403004630440220253716d38f99347f8b325efd2853f30b0ceabacedf0fe1e89818055f81a57434022062a63285a001ae50a9ac9e733e6342a6bc53fa877dd142deac8d89f979bde58d00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bd8e03c620000040300483046022100b88d417f91641698a55fa729cd74d1eae870657d289994cad2b874a5e3619e38022100e083d51c98113d8369d0885173a796bf1af384f7371a2202030d3420e3ecdc0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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