060001.tc-connect.elior.com

Issued by R3

About this certificate

This digital certificate with serial number 04:42:f8:24:ff:08:aa:b2:d1:2f:a2:54:f4:dc:b8:6d:5e:b5 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=060001.tc-connect.elior.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:42:f8:24:ff:08:aa:b2:d1:2f:a2:54:f4:dc:b8:6d:5e:b5
Serial Number (int): 371237620582165594424961975356999678647989
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:7a:a4:6c:39:b2:8c:22:d5:d0:6b:c9:e7:b0:de:de:cc:bc:20:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:31:bf:30:31:b8:47:79:d4:9c:d8:a8:b6:44:5b:83:ca:17:53:b6
Fingerprint (sha256): 63:80:a5:57:65:c2:0f:56:f8:df:77:3d:26:0e:26:02:09:17:97:77:3b:cf:db:86:c4:31:f3:de:97:c4:4d:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 060001.tc-connect.elior.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 060001.tc-connect.elior.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

060001.tc-connect.elior.com

Other certificates including the domain name elior.com

(limited to 100 certificates)
*.dashboard-rec.elior.com
toptrack.elior.com
049633.tc-connect.elior.com
bonapp-api.elior.com
*.elior.com
mobilite.elior.com
*.elior.com
mkt.minasdepresentes.com.br
achats.elior.com
webmail.elior.com
webmail.elior.com
timechef-v2.elior.com
portailrestaurant-dev.elior.com
kanji.elior.com
005653.tc-connect.elior.com
webmail.elior.com
applis-elior.elior.com
roomservice.elior.com
060001.tc-connect.elior.com
imperva.com
049629.tc-connect.elior.com
webmail.elior.com
*.elior.com
dashboard-rec.elior.com
048839.tc-connect.elior.com
portailrestaurant-rec.elior.com
toptrack.elior.com
toptrack.elior.com
timechef-v1.elior.com
bonapp-facturation-api.elior.com
apptable.elior.com
servichezvous.elior.com
toptrack.elior.com
bonapp-facturation-api-rec.elior.com
monparcours.elior.com
servichezvous.elior.com
webmail.elior.com
*.elior.com
bonapp.elior.com
webmail.elior.com
monparcours.elior.com
kanji-auth.elior.com
recrut.elior.com
applis-elior.elior.com
timechef.elior.com
smartordering.elior.com
webmail.elior.com
*.elior.com
achats.elior.com
060892.tc-connect.elior.com
047463.tc-connect.elior.com
*.elior.com
chefsandgo.elior.com
roomservice-v1.elior.com
monparcours.elior.com
003368.tc-connect.elior.com
remotectrl.elior.com
*.elior.com
si-pro-tre.elior.com

Certificate

The complete raw certificate details for 060001.tc-connect.elior.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371237620582165594424961975356999678647989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 22:04:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 22:04:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '060001.tc-connect.elior.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855474793828181312161177420315467948166384407359359767527106449162651156347980816527707815164020734481524915594289934085713788670814299417657585500060518800557401195641498968646721438338633723086482690532090675628375191962560633269442440793488502244036123945150096087679037040361650896227155333775265646662139445354800364462454579230468827196572769756792744150826022778298512670479149208779450102060156244901297786934340402287613844962868507917970315207016667520364056719447774710284589455646271629859246516678891662742260127178892949896559498006007818148437140259390733662901884938321785755816729928098882852252235562262296448042110135560179235230550046950195191345825111385354050411689967889224030668435236273579265860760597456854323014480355737352225469372967670391224174255661520328594999350542824497019776429365943270459175807393424872679951978613465024681797739636400317266741005637262373609030547954685069955939785261995065117726480212398263616613088080134491585054604105219167852814259835721174195763731115767330541019767659384681042590940141107855346749171074679121092984367502077324745442495864449201080464055544843442667861370999483072808947370149856968036172132276722013456921931316766583156144963876547453881795640387301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db7aa46c39b28c22d5d06bc9e7b0dedeccbc209f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '060001.tc-connect.elior.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018de2839ee60000040300483046022100842582ece51e32fa1c47b654f736fd9fdf68639eabab31c4817fe577c2ed2eb8022100a57569b9c332b99332993ccc9e0407859c19b935857b2f313ef50af787550cd500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018de2839eea00000403004730450220603248d931d5e682e6d7380e1923c094272b6f17b85ee53e394979b3f06ead46022100de6d4bfc4705be398d5bcd5e25875603a079ce7814620604ad75d7974a01ae38
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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