annexio.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:2b:b0:06:2e:10:66:5f:cd:39:10:7d:5c:7e:e2:e6:28:bd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=annexio.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:2b:b0:06:2e:10:66:5f:cd:39:10:7d:5c:7e:e2:e6:28:bd
Serial Number (int): 276202975788210565927691138950658573871293
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:10:0e:19:65:29:f5:83:37:0b:da:2d:46:c5:15:c5:f3:cc:3f:b7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:99:87:0d:e0:7b:84:b9:86:60:a4:8d:ca:d1:19:e9:2e:ae:6a:55
Fingerprint (sha256): 5f:d6:36:7b:0b:1a:02:0c:66:5f:67:27:40:c4:b8:6a:8d:07:1b:5b:43:4a:f4:38:ef:d0:7a:2f:c1:99:df:e5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate annexio.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for annexio.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annexio.fr
www.annexio.fr

Other certificates including the domain name annexio.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for annexio.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq3FlLUR+7+ccodYugxdV
uNv/8olB4dONQB3fOsL4QiSJX+Bg+1XmvglH1k553RpbsgPg4m53RmMqCVrEEMj/
mhTGDqUf1U8iWuRnZTUfilTjo0CbIiwNgqAkAeDh8CFihaZg5LngY1mRi7L1UPQG
gK/VgEt2YusolTdyy8bwXi/pVSDIpElnA0qFCQLEsEHfE8RJTgN3w/VPM7Hbr3KI
uroNcqQkTTxCOhNHWhJqS2vzS4eD+u7wTw6+AbsUJEMT3koI5v7IAQRN6Nwle176
U+poRcXiz1EAxsHby3Dnq6rdwM2fF2lzYjM5njehzeFHt10Tu/SAK/4y81LPyXe9
YbLWBU8l4lYGtKOCMOxlj3mEYANxJHT6C+hc29ZLV+pqinWfPxjgqpOHzhEvg+FC
p0bPgdo+KIq169ZAxKvcrqdsXOaP5ZgzRQHdFgQ3vUXvSRz81r6bU4MTPOdYeVFq
Tz1sqnevasNHXMXs9bqRuamRJuofvRxOKm+dmWbqx28VdpZ+Lrn6go+BAOQZJGju
bZru9UcpCSr7HTjKFRWr9dWhFN4OaWSCcLLSUKfe1Mgu2WwX/m4qrrc3JkcSrezH
h2vTTqHgeSU0kR3caCb33qlBcxPBuUSFotyW8kfpw2hVtcexCav1KfwYaxphij5P
dS56KinBDKHkDtJF7N8fAe8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276202975788210565927691138950658573871293
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 22:29:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 22:29:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'annexio.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699426214321617891116283494071055764465411745619374900228435039116895292774001148521299652429071465602854277910184155865540250711483934179966303566850844470298242096169753401352263720735894676406382981508948525957822019990868844718786687449690724955874578727414269790547706986385767643304278035487314059973753689437137380607012847264388791293672296432443096864141786413016333337508670235991191353387869508593261273653261310261223368949113709345841172865823481637616123170122809085280868253570308454289330923570900188359814581184455934919030823651058510908832672130261922425377392462734952554085837122485635594568851473344764985071479903054465208109209636492864313493455077893433403551154236971921934592349689959529612540937981405312323369793038329594457083603878766811419797835842232514348577562785893106840207792473796956490751209875484535657315285974977373589522514966537524068984150533829517482384479476244496803817601381251957841133196731491334746437261405298316261962404729984940068836272487484390610746302477893089347504977663290812792594702071737463111845336120140372924992616397748270086195569313558708664611654716681646291528260551454671240376545309530821011303840604854676883781289498315082042477559801980234475669997683183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e100e196529f583370bda2d46c515c5f3cc3fb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annexio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annexio.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc8da1dfb0000040300473045022002b334e619ec83a23e88950c1013effb46a585ba49fb8f27ed2a258cf3f2d9f70221008f37a007741e50368403b35c8b9b469dd13ff730b5319710843474c32c369a64007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dc8da2005000004030046304402200a9f22c4f1abb9b287c6170f67d79f60cc31c1c4192ff2e38c3b10213ac716b7022047c597bb64cfb83bed9ae26d01291226ebb1337788c7c755ab7a14d26c2f3b0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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