aide.assistant.sncf

Issued by R10

About this certificate

This digital certificate with serial number 04:37:54:05:94:82:96:a9:6e:91:60:9a:47:87:ed:f8:4c:7a was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aide.assistant.sncf

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:37:54:05:94:82:96:a9:6e:91:60:9a:47:87:ed:f8:4c:7a
Serial Number (int): 367276358032965737733823619089588293225594
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b3:39:20:c7:27:b3:33:0e:2f:9d:22:88:87:20:20:dd:89:1c:26:b0
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 6f:d9:b5:e1:5b:f1:88:d7:1f:0f:67:fb:1a:dd:85:86:51:41:e3:60
Fingerprint (sha256): 64:07:f3:6e:6f:3b:c9:4c:ce:c1:65:48:3b:5d:92:56:54:9b:1b:12:27:db:84:d8:18:cb:55:46:94:eb:26:21

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate aide.assistant.sncf

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aide.assistant.sncf

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aide.assistant.sncf

Other certificates including the domain name assistant.sncf

(limited to 100 certificates)

Certificate

The complete raw certificate details for aide.assistant.sncf in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgISBDdUBZSClqlukWCaR4ft+Ex6MA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjQwNjE2MjMzODA5WhcNMjQwOTE0MjMzODA4WjAeMRwwGgYDVQQD
ExNhaWRlLmFzc2lzdGFudC5zbmNmMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC
CgKCAgEAttqNKq7cfb/B/sk7mwSZx1f2YG6RFHuC690S7WB6a6AqNXlvkZQrSmSr
9XxxoAUkEo632Tj7aSXDWeIX7SqZxuuFGvjk31QaIcWUtLkSMsAGj4hV0lFSBQmP
DBRIk/yvw90pzHBGVkoScikpdx2wWwILVIUkWQ1+WSFHap1fPJx9nm+Qd3kDtm6C
VCMFEhHm0T7bEa15LKcrbYJGRJ0FGm1xQj6os3jYDX95Ipsks0I2NgBSy9c8yBDb
lMdjSiEYFDSRSr66G1O2q+fTXKgMr1Dbuw075TWEq/d+XPo5gR+27DjQYm72cM1z
AHjaQXCFmbsd1F5lOgYEu+5rTddl+3KGwgc3s3DTw9HSFpMykScPuaYQx5QbD8Ja
cv/4kyd++CSno/R9eD73jB5J6evC5CDxakFPi2fX/52L1dFAytciR/cPryXu38wR
2Dtp9rlvDHVQJj2OvTjOMDvSmuVgn6sCegEy1C6r/szfnHo3sB0Wh5R5mXs7253r
TJtg53rwNzt8Nn/FFIN9m46s/q4bjLctvtkgHHufrunuCw6s0bCu/OynIz2M2zpZ
UhzSzUnalkcYM7JqbZPVNTQWB6A7TCbyZNVeRE11fqMuJis3bGxoRh4acqhFUha+
PzqwpZCHVuGntxQ0MqFlTNdGIUNL+/47+584y1ayV+/LSpPXIhMCAwEAAaOCAhcw
ggITMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUszkgxyezMw4vnSKIhyAg3YkcJrAw
HwYDVR0jBBgwFoAUu7zDR6XkvKnGw6RyDBCNojXhyOgwVwYIKwYBBQUHAQEESzBJ
MCIGCCsGAQUFBzABhhZodHRwOi8vcjEwLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAC
hhdodHRwOi8vcjEwLmkubGVuY3Iub3JnLzAeBgNVHREEFzAVghNhaWRlLmFzc2lz
dGFudC5zbmNmMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGQI6FD
eQAABAMARzBFAiEAzIBrh2kwICq7sKipyXOXOkk9L89DrecGzrlENykGnfICIGlF
GMncOddKeArCQXhL1sJKqu+wdEjaHp1CC+uO0GcrAHYAdv+IPwq2+5VRwmHM9Ye6
NLSkzbsp3GhCCp/mZ0xaOnQAAAGQI6FDowAABAMARzBFAiBASzdQGdPbwbCkfDsq
Vz1AcWitsw8eBAlQgqObSXMXagIhAMgSaiH/2N/2CjnwVXsPrvfdn4XYu2149AxB
ZvuPSkmlMA0GCSqGSIb3DQEBCwUAA4IBAQBb+W1sfeXwu5vv7zAxZRacNgIn1Iyl
Pw86cZdv/kRPCj1wUX+DG539yZP+Clj22iRQyNhi6eUL0gPnWCBzCcafJNTGDXqP
Im1YyZjSbXYx5vijlJcegfhGc3pQEEBaT9MqiQSJuFpjjVCmZoSkYl6AvKbatbi7
FFPmOPEA5JbskbMjdPuXk7Q4g5lz1gbzHLAG+Xb52DN1llBOQTy29i7seD8w/jpz
glPlIzGh0MgUjH+4u398k/UUarFmcgUeIY6sAoaEgFYn4AiWrwF0qf5Bvi+Az6ib
6OiuvyTvzFj+rhN+26gT3MhFxtt34/ighHej9OIbNNa9HjGAiITWUe00
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAttqNKq7cfb/B/sk7mwSZ
x1f2YG6RFHuC690S7WB6a6AqNXlvkZQrSmSr9XxxoAUkEo632Tj7aSXDWeIX7SqZ
xuuFGvjk31QaIcWUtLkSMsAGj4hV0lFSBQmPDBRIk/yvw90pzHBGVkoScikpdx2w
WwILVIUkWQ1+WSFHap1fPJx9nm+Qd3kDtm6CVCMFEhHm0T7bEa15LKcrbYJGRJ0F
Gm1xQj6os3jYDX95Ipsks0I2NgBSy9c8yBDblMdjSiEYFDSRSr66G1O2q+fTXKgM
r1Dbuw075TWEq/d+XPo5gR+27DjQYm72cM1zAHjaQXCFmbsd1F5lOgYEu+5rTddl
+3KGwgc3s3DTw9HSFpMykScPuaYQx5QbD8Jacv/4kyd++CSno/R9eD73jB5J6evC
5CDxakFPi2fX/52L1dFAytciR/cPryXu38wR2Dtp9rlvDHVQJj2OvTjOMDvSmuVg
n6sCegEy1C6r/szfnHo3sB0Wh5R5mXs7253rTJtg53rwNzt8Nn/FFIN9m46s/q4b
jLctvtkgHHufrunuCw6s0bCu/OynIz2M2zpZUhzSzUnalkcYM7JqbZPVNTQWB6A7
TCbyZNVeRE11fqMuJis3bGxoRh4acqhFUha+PzqwpZCHVuGntxQ0MqFlTNdGIUNL
+/47+584y1ayV+/LSpPXIhMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367276358032965737733823619089588293225594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 23:38:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-14 23:38:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aide.assistant.sncf'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745978079970780258387597919460472465018634748238929614606943385429247854415824683339277912464692039075842020967538208552203120540061711145765835701810059018515075669453885432321335408556492107757605344157398932041188078860798824344138603340180529576373878433668571237972203440341334741018950763028251905398021190012738845945529087089211305468315457608088165535544420940284702053228109693257655877275792126741436865663481090483023873299495587262625691381195111056741881492430955386855815095020977881493417576396414698747605807303296654765818227520217921275242311386470159995340264073879407760273372410986016914308198887389695413407424758081478407411717481478523381404697290055498234586408924948535661270795907960838083613482881974970437143195754645755025221536329114394150556702425570871757919489926415204130055059023840757213601948410701278535682464950046940187404156036334028497519659114885920437074248658959111044556740874301694461636504045982292877521506249545075389148596225729392572208872945830122612774745717497805789838937429174677843925743193950232020355465233793520861905071514257270843945249553132704095847202174877221295710048505468477770196256802877328955013756650360096474725358584449041782974878149800771340128264593939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b33920c727b3330e2f9d2288872020dd891c26b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aide.assistant.sncf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000019023a143790000040300473045022100cc806b876930202abbb0a8a9c973973a493d2fcf43ade706ceb9443729069df20220694518c9dc39d74a780ac241784bd6c24aaaefb07448da1e9d420beb8ed0672b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000019023a143a300000403004730450220404b375019d3dbc1b0a47c3b2a573d407168adb30f1e04095082a39b4973176a022100c8126a21ffd8dff60a39f0557b0faef7dd9f85d8bb6d78f40c4166fb8f4a49a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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