pantry.lepainquotidien.com

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 16:10:1a was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=-YqSe9/FF6HaIZOPcRCsqxC8rE9F0nBC,CN=pantry.lepainquotidien.com,OU=GT44236720+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:10:1a
Serial Number (int): 1445914
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: c2:cb:35:6b:4a:41:99:54:de:a6:ef:e8:6e:c7:a3:c9:b3:ff:6b:91
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 72:a3:15:34:7d:ea:f7:ab:33:3e:72:da:5b:db:24:e0:cc:8a:bf:48
Fingerprint (sha256): 5e:89:6c:75:c4:ea:ca:6d:74:16:5e:9b:8f:eb:43:bb:1f:a1:fc:85:9b:fb:da:40:91:af:96:58:ab:03:65:30

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate pantry.lepainquotidien.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pantry.lepainquotidien.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pantry.lepainquotidien.com

Other certificates including the domain name lepainquotidien.com

(limited to 100 certificates)
helpdesk.travelleaders.com
helpdesk.travelleaders.com
helpdesk.travelleaders.com
passportal.lepainquotidien.com
helpdesk.andersonmt.org
pantry.lepainquotidien.com
helpdesk.travelleaders.com
helpdesk.andersonmt.org
fwhq.lepainquotidien.com
online.monkeymediasoftware.com
helpdesk.andersonmt.org
status.lepainquotidien.com
helpdesk.andersonmt.org
servicedesk.frauenthal-automotive.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
online.monkeymediasoftware.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
help.windownation.com
support.japara.com.au
helpdesk.travelleaders.com
helpdesk.andersonmt.org
online.monkeymediasoftware.com
online.monkeymediasoftware.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.travelleaders.com
servicedesk.guardianalarm.com
online.monkeymediasoftware.com
helpdesk.andersonmt.org
helpdesk.themetropolitanschool.com
helpdesk.travelleaders.com
www.lepainquotidien.com
helpdesk.andersonmt.org
helpdesk.travelleaders.com
servicedesk.howardbrown.org
fwhq.lepainquotidien.com
helpdesk.pvasatx.com
order.lepainquotidien.com
passportal.lepainquotidien.com
helpdesk.travelleaders.com
helpdesk.travelleaders.com
lepainquotidien.com
helpdesk.travelleaders.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
pantry.lepainquotidien.com
helpdesk.andersonmt.org
order.lepainquotidien.com
helpdesk.andersonmt.org
www.lepainquotidien.com
helpdesk.travelleaders.com
helpdesk.andersonmt.org
order.lepainquotidien.com
helpdesk.travelleaders.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.travelleaders.com
helpdesk.andersonmt.org
helpdesk.travelleaders.com
lepainquotidien.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
passportal.lepainquotidien.com
lepainquotidien.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
www.lepainquotidien.com
helpdesk.andersonmt.org
online.monkeymediasoftware.com
pantry.lepainquotidien.com
helpdesk.andersonmt.org
helpdesk.travelleaders.com
helpdesk.andersonmt.org
support.goodwillny.org
catering.lepainquotidien.com
helpdesk.andersonmt.org
order.lepainquotidien.com
helpdesk.andersonmt.org
helpdesk.travelleaders.com
helpdesk.westernglobalairlines.com
fwhq.lepainquotidien.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
lepainquotidien.com
www.lepainquotidien.com
helpdesk.travelleaders.com
pantry.lepainquotidien.com
helpdesk.andersonmt.org
online.monkeymediasoftware.com
lepainquotidien.com
fwhq.lepainquotidien.com
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.andersonmt.org
helpdesk.travelleaders.com

Certificate

The complete raw certificate details for pantry.lepainquotidien.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYxAYfu1oCsm6eBtu4PY
ITSiJJFRsuiLMip4uNGD5GyztMUbM/y28T+RtTApJFVvwKaEbN9CaPTEHleXLnqh
Byorij5DBmNo7C621KqdcD0SlvS7LDGkXUqCmUmDBTOxeEug7Gg9VlNvr09Z2aZO
7db6laaMI3SahqYKl/8g5gILAz80b7szHsIzk28aFs4Kt+1HYt8UI3Ebp2MmhbrG
1nFVaEfAt+YJ0FCQUiQUYVoLEjJygD+KepLiBoU6xSfneTSUBiMLQXeyQ43CJhom
lAaJpwUQImvUmEUln0FkUQS9Tnftf/yuv4ux9kkn5JQTQzlOvHwnYo+AzHGgwCMp
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1445914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-09 18:02:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-12 15:54:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '-YqSe9/FF6HaIZOPcRCsqxC8rE9F0nBC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT44236720'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pantry.lepainquotidien.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20898480909286725476158147856437113583876850898204744143508305254441064067640379979209574486579608040043197091544782371153613431013852910203405191932400788969284493296696094411467835997181070808946469271703541324578292352706935618693784544686270919518466964509632096821484322092217756824681670426917193448149366796263655445535967558080158762012925592639291324754094311604637755930433794954108915118335388606398394709792496152241690312088981853504833911239168925217923601205466782216815126346623130946413406447627633581602180831879448129832540482021762659172947783073414597654065287343436274901419634003937926087649771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantry.lepainquotidien.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2cb356b4a419954dea6efe86ec7a3c9b3ff6b91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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