cri.epita.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:64:6b:c2:68:a2:f5:93:0e:b8:09:0a:51:7a:b9:13:f2 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cri.epita.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:64:6b:c2:68:a2:f5:93:0e:b8:09:0a:51:7a:b9:13:f2
Serial Number (int): 326123989828679028274543312770338362299378
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:25:37:3c:c2:7b:b8:08:b5:ce:04:b6:fe:56:f3:fb:72:60:f9:8e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:9b:0f:b2:bc:d8:d5:23:f4:3e:61:80:d9:74:f9:83:fe:10:e5:87
Fingerprint (sha256): 65:42:7c:34:14:d3:cd:66:1d:d8:b8:8e:48:2f:08:23:44:c1:5f:c9:04:0d:38:5c:bf:da:2e:d2:58:a5:30:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate cri.epita.net

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cri.epita.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounts-beta.cri.epita.net
accounts.cri.epita.net
cri.epita.net
doc.cri.epita.net
exam-sup.cri.epita.net
gitlab-int.cri.epita.net
gitlab.cri.epita.net
icinga.cri.epita.net
lists.cri.epita.net
news.cri.epita.net
photos.cri.epita.net
tickets.cri.epita.net
wiki.cri.epita.net
www.cri.epita.net

Other certificates including the domain name epita.net

(limited to 100 certificates)
inge-etud.epita.net
intra.cri.epita.net
inge-etud.epita.net
absences.epita.net
apply.epita.net
cri.epita.net
epita.net
doc.cri.epita.net
inge-etud.epita.net
www.epita.net
acdc.cri.epita.net
inge-etud.epita.net
acdc.cri.epita.net
intra.cri.epita.net
inge-etud.epita.net
cri.epita.fr
epita.net
absences.epita.net
inge-etud.epita.net
apprentissage.epita.net
absences.epita.net
intra.cri.epita.net
cri.epita.net
accounts.cri.epita.net
cri.epita.net
sup-sub.cri.epita.net
inge-etud.epita.net
apply.epita.net
cri.epita.net
tickets.cri.epita.fr
apprentissage.epita.net
auth.pie.cri.epita.net
inge-etud.epita.net
accounts.cri.epita.net
cri.epita.fr
photos.cri.epita.net
photos.cri.epita.fr
photos.cri.epita.fr
acdc.cri.epita.net
photos.cri.epita.fr
epita.net
photos.cri.epita.fr
doc.cri.epita.net
doc.cri.epita.fr
absences.epita.net
doc.cri.epita.net
absences.epita.net
epita.net
inge-etud.epita.net
sup-sub.cri.epita.net
accounts.cri.epita.net
static.cri.epita.fr
apply.epita.net
doc.cri.epita.net
epita.net
auth-2.pie.cri.epita.net
www.epita.net
cri.epita.net
doc.cri.epita.fr
inge-etud.epita.net
inge-etud.epita.net
cri.epita.fr
apply.epita.net
www.epita.net
doc.cri.epita.fr
absences.epita.net
acdc.epita.fr
sup-sub.cri.epita.net
sup-sub.cri.epita.net
photos.cri.epita.fr
doc.cri.epita.fr
acdc.epita.fr
epita.net
accounts.cri.epita.net
ipxe.pie.cri.epita.fr
acdc.cri.epita.net
doc.cri.epita.net
apply.epita.net
www.epita.net
doc.cri.epita.fr
tickets.cri.epita.fr
doc.cri.epita.fr
www.epita.net
tickets.cri.epita.fr
tickets.cri.epita.fr
cri.epita.net
auth.pie.cri.epita.net
static.cri.epita.fr
apply.epita.net
grafana.cri.epita.net
v2ssl.webservices.chronos.epita.net
photos.cri.epita.fr
doc.cri.epita.net
accounts.cri.epita.net
apply.epita.net
www.epita.net
acdc.cri.epita.net
photos.cri.epita.net
cri.epita.net
www.epita.net

Certificate

The complete raw certificate details for cri.epita.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326123989828679028274543312770338362299378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-25 22:04:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-23 22:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cri.epita.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 631411993740427477231566429589716005435555191801217766832400258901499301511026411592202579305823967079546456372241445816320154380462654461512195752350132840158358528198608317500840432248454687613523647736708737536333470531848825259305130352845705111272355439405946776280954186816939778206755263985170480527029840132831832560905416593092142511999104755467489577784540402228708440742169130185617206547433122831708513387566543601638778468902693614394091084522540441274306966119020960173196833765311528194331381848497539919215603476107243312484957739247982726404500284201886722015113815398993226029753788733029900054237324196725468232794161818580315800802360256776208930850073054948273813831442143596198868028663286939940755355544959394505770879540764831970888836584847431686963788005451889644430789885054877180314433058253815710397225149668408302440979679032628024867218525422724539286215291028653457610682365055929499360131593111619687045108691397674151457345404046774381075208149889721248945151708700653364548934900070263373613245227797190148899585351506340036593419060411503577759416287222274282242539875295744311957828461343416068453461836656447691208671406849075053535933129788279750746921698264120126780487548846637519756162487889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6525373cc27bb808b5ce04b6fe56f3fb7260f98e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (310 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-beta.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exam-sup.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab-int.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icinga.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.cri.epita.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cri.epita.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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