dfrere.fr

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:73:ab:be:b7:89:e5:0a:44:52:ae:96:42:4b:a8:66:35:82 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dfrere.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:73:ab:be:b7:89:e5:0a:44:52:ae:96:42:4b:a8:66:35:82
Serial Number (int): 126473046373956612388291271323170604725634
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 0e:d3:ca:a6:c1:ba:38:24:9d:06:bd:cb:27:a5:36:18:72:d8:34:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:ad:61:5d:ad:dd:63:b0:72:8a:9e:cb:47:a6:fb:39:98:b7:90:d2
Fingerprint (sha256): 67:af:21:41:e5:a1:58:14:d5:2b:4c:69:5b:0b:90:70:3c:0b:b8:23:97:ae:fb:cd:4e:c4:c3:aa:bb:6a:dd:0f

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate dfrere.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dfrere.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.dfrere.fr
dfrere.fr
www.dfrere.fr

Other certificates including the domain name dfrere.fr

(limited to 100 certificates)
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
www.dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr

Certificate

The complete raw certificate details for dfrere.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISAXOrvreJ5QpEUq6WQkuoZjWCMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAzMDkwMTI4MDBaFw0x
NjA2MDcwMTI4MDBaMBQxEjAQBgNVBAMTCWRmcmVyZS5mcjCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBANG3/hUaTkDIvFQV0M0UcRtgS4cZwRcP9RO2EemD
MH9oJELc51u2wlRcxrAJkfkxshc3LJPY3dW/UPwiDrGW8XYodBXCQsqaKdnTZtcy
GFsf1VNJDhXrrLiUu0V2/kJw22U2Vm/i2azxH1oIz/3L88Pr0/L9wdZ0xYCZPCHO
VNcdGR39SDfj9a8IjLJ+e2q2/XVbed6OOhzIV3kzdrKrQRdhm94KFBCp4CwT/7ja
kZjEBkTweC0ERmtLQVtU0+Gh9AX8ee0iR4XSDQYHdV5AVDdpaPODVz99cs8RyKBZ
DDK0ySxCvx2j5vEQaMRx0yVs9nxq+jM0gcxyMJzfyVsWJA906AGDK4Ai30Sivv39
tsNqsMeG1JLPOa5XHHMbHpy7+3TGdYIY22n2E66923m12m3jxvoyypFEjgblD7s0
+onXxvsLzIXskQ8bNfzR8A4Z8qd8UvM9O5W5RwcwLCstnMinLuREuiO9gORDJRYb
x7S6peoKbt6dSB6KpjxO3ZsP5uYyWjosAx3IApvwDMatmmqejaPWIcZwUWY8h1QH
ejgYETKjmwDfC5/TYb3+3JubNcZcHTx2iz70+cuLOYXxuw7MKeZt4Ra8ZXDo2bAO
Vx52syFBl6eMrsmroLCAyGiMYOcXqTjWsKoMXekz/x035KvWThJuEtfNT2pc4yBZ
ZPv/AgMBAAGjggIpMIICJTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFA7TyqbBujgk
nQa9yyelNhhy2DSoMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAG
CCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgxLmxl
dHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14MS5s
ZXRzZW5jcnlwdC5vcmcvMDMGA1UdEQQsMCqCDmJsb2cuZGZyZXJlLmZygglkZnJl
cmUuZnKCDXd3dy5kZnJlcmUuZnIwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYG
CysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBv
bmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBp
biBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBh
dCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0B
AQsFAAOCAQEABHPpJeUCPx2sFUdMnyImgX+eRQ0CtbQzL32rLgSShfAvacn7tWij
tHGZJlrWMA+sn6pdhH/P5HvJwrknHxK2lZ6PrYMUQCc8Q3LzIwj/CuyOoEXOP4d4
daP3OpYVFWGHJT9zZC5AmCtPKBAMdPutZ7N4cwjnmNkcs/asQ1+1DSTCXvPX9L/r
PcH4nX1JAinDK/cGFzHDDxU6zebg+Sw/H7cSSbNntxzFxTwANUJRvMW7YyecyUvu
Jw58zPIObQTpTgbdoxcWrSCMSrPi/z1evp1Aj5AuGJz3eeoZ6eUWMJqZvWFwqpHJ
0MJRKEhYckO9BIxkZe/Wqm6CiIQTaNEu/Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 126473046373956612388291271323170604725634
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-09 01:28:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-07 01:28:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dfrere.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855577735020706753429978104298885924482884366054909070095392148541753175349640282933892579655015879463096590405048917277274129674810139826775949059159521915920835111983966476755051219308546934869369769307758185940894780059228273670141808928454676258544452921665989066174336140732991448226984560438000519914085075744964976944085217960834445548923294965515788009004932753941045531546036650349242253464314501023998677323400566707279295046804855727652950781845847944198822263896997823686496622173722098214217933255729138402503503602331823674983462852704192564941781008945077114109290406313992777122471960198466973917230393068971009190171640034319428035317196151187528309444014382996632931844478860347257917792451282250491345589632641368703111841032622974254717480256737680967739512981923598649302780605596019988527133383230524741352518067900048359782611518454014817846085691929530140700969839770315149003461530440526475612973899554618734919456836801036777659529194085035817151031991069445722416557412478787725523632876286712243885729088030093399487269084724706671638205345432684463943752296522197278031602765545115188402171126383539908888779715306529490636114408054399129511247003552224642802207885320108587132455942948780566556493282303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ed3caa6c1ba38249d06bdcb27a5361872d834a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.dfrere.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfrere.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfrere.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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