scienceatstake.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:55:1d:a3:a3:55:a5:6c:e9:3c:c6:66:72:fa:c8:01:ca:cc was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=scienceatstake.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:1d:a3:a3:55:a5:6c:e9:3c:c6:66:72:fa:c8:01:ca:cc
Serial Number (int): 290300256252644568972452480523630194838220
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:1c:3b:b7:80:50:0a:8b:70:1d:b8:10:40:ae:6d:74:d7:85:0b:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:ab:a3:83:48:11:fc:19:35:3d:12:50:0e:c4:cf:91:e5:5f:30:84
Fingerprint (sha256): 5c:0e:50:6d:6e:31:bc:94:b8:12:8d:dd:5c:88:4f:cc:82:58:e7:3c:e9:71:08:5e:a3:3f:a4:ff:9a:0d:6f:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate scienceatstake.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scienceatstake.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

100jours-pour-convaincre.lesechos.fr
100premiers-jours.lesechos.fr
actuenligne.com
berluti.obsession.nouvelobs.com
bubble-game.lemonde.fr
capgemini.ft.com
dsi.lemonde.fr
edf-pulse.lefigaro.fr
elles-defient-le-temps.lemonde.fr
en.takepart-media.com
energie.lexpansion.com
galice.nouvelobs.com
greenweez-magazine.com
hyatt.lefigaro.fr
innovation-sap.lemonde.fr
jaguarlandrover.lesechos.fr
lesbonsmoments.lefigaro.fr
lesclesdedemain.lemonde.fr
macao.madame.lefigaro.fr
marieclaire-loves-divine.fr
microsoftie10.nouvelobs.com
mobile.planete-plus-intelligente.lemonde.fr
mobile.zoe.nouvelobs.com
newsteam.scienceatstake.com
norvege.nouvelobs.com
nouvellepassat.lefigaro.fr
planetebusiness.lemonde.fr
regard-de-pro.lemonde.fr
scienceatstake.com
scitizen.com
strategies-entrepreneur.lesechos.fr
takepart-media.com
visionmarketing.e-marketing.fr
www.actuenligne.com
www.en.takepart-media.com
www.marieclaire-loves-divine.fr
www.scitizen.com
www.takepart-media.com
zoe.nouvelobs.com

Other certificates including the domain name scienceatstake.com

(limited to 100 certificates)
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
www.scitizen.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
dsi.lemonde.fr
scienceatstake.com
scienceatstake.com
energie.lexpansion.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com
scienceatstake.com

Certificate

The complete raw certificate details for scienceatstake.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290300256252644568972452480523630194838220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-04 06:53:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-02 06:53:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scienceatstake.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839701276825656382860267000302448307126012352223604731832708357986575202666921792177599854781143566034579338206733811596037727240234442720697172089420663977322846983644147070816956223337167058645011193640950685396384953685554714652134188462894007855527241172377591347108670023868378422099379073682292489685640958539540562560672421492556506895256827970804529756563677116537242799739613264328447189518822740774515464006815478919888529513748823056891121508389949039027008417215204754769260681862717762691596581387354369566158762345052827596056712134762005424173667919114550859804487585331187347074196611421026470769599507575211462136685094338494343076510636852748901010617599942343612609476706626288403469088963508431657471262696381393934979212168447937609849356555976055593779547961403996412336303072073270431083627034978120376100043655568803270226268548815256159974789473345222289259806149985520601211998360927854404933832636595915982615515777571167170260405420558709965544491484241845474189526481105512555922580689080123887411995796255182985714406509673995335612789840198597382895946342357183250024555130115098568189238418682510332225953309792125359607356274243021783454559347490865666846448768324235113059827563428112073944520329853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f1c3bb780500a8b701db81040ae6d74d7850b1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1017 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100jours-pour-convaincre.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100premiers-jours.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actuenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berluti.obsession.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubble-game.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capgemini.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsi.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edf-pulse.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elles-defient-le-temps.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energie.lexpansion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galice.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenweez-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyatt.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation-sap.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguarlandrover.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesbonsmoments.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesclesdedemain.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macao.madame.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marieclaire-loves-divine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsoftie10.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.planete-plus-intelligente.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.zoe.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsteam.scienceatstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norvege.nouvelobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nouvellepassat.lefigaro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetebusiness.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regard-de-pro.lemonde.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienceatstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategies-entrepreneur.lesechos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionmarketing.e-marketing.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actuenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.en.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marieclaire-loves-divine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takepart-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoe.nouvelobs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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