staffme.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:0e:7a:99:a1:ec:d1:1f:74:89:b5:6d:1f:55:68:38:fb:69 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staffme.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:7a:99:a1:ec:d1:1f:74:89:b5:6d:1f:55:68:38:fb:69
Serial Number (int): 266263774453309506928853552830109099555689
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:7b:1a:76:d9:49:f5:f2:c3:8d:ac:56:1b:d3:f2:9c:3d:89:59:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:d0:43:d9:21:88:27:5d:20:45:6c:b8:37:ff:8f:20:28:c0:42:24
Fingerprint (sha256): 69:14:82:61:f2:0e:99:ee:59:73:15:27:09:a4:20:b0:98:0d:76:8f:98:05:62:b5:aa:4d:ee:bb:47:ca:4d:86

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate staffme.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staffme.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staffme.fr
www.staffme.fr

Other certificates including the domain name staffme.fr

(limited to 100 certificates)
help.staffme.fr
www.nooragarbatti.com
account.staffme.fr
api.staffme.fr
staffme.fr
account.staffme.fr
help.staffme.fr
api.staffme.fr
weekdayfarms.com
app-dev.salientmotion.com
help.staffme.fr
api.ppd.staffme.fr
account.pprod.staffme.fr
www.2alan.com
oohbabe.in
account.staffme.fr
www.haiyamedia.lk
www.staffme.fr
www.staffme.fr
www.4wheels24.co.uk
account.staffme.fr
entreprise.staffme.fr
api.staffme.fr
api.staffme.fr
invoicer.smartdesyn.com
api.staffme.fr
dashboard.jamrio.com
account.staffme.fr
account.staffme.fr
ilmastoraportti.juhaitkonen.fi
account.pprod.staffme.fr
www.alicetesch.com.br
account.staffme.fr
www.staffme.fr
account.pprod.staffme.fr
help.staffme.fr
account.staffme.fr
account.staffme.fr
api.staffme.fr
account.staffme.fr
account.staffme.fr
account.staffme.fr
account.pprod.staffme.fr
api.ppd.staffme.fr
staffme.fr
help.staffme.fr
api.staffme.fr
help.staffme.fr
account.staffme.fr
staffme-api.staffme.fr
www.mothership.cx
upliftfitness.jp
staffme.fr
api.staffme.fr
www.nebustation.tech
www.staffme.fr
account.pprod.staffme.fr
staffme.fr
staffme.fr
staffme-api.staffme.fr
www.staffme.fr
pashiconsultingservices.com
estara.no
account.staffme.fr
api.staffme.fr
staging-link.staffme.fr
account.staffme.fr
exerciciosresolvidos.com.br
staffme.fr
promobw-nica.vincuhub.com
account.pprod.staffme.fr
mycitigroupcentre.equiem.mobi
thecleanappproject.com
www.staffme.fr
staffme.fr
api.staffme.fr
www.staffme.fr
independentproductions.ca
app-dev.salientmotion.com
staffme.fr
app.talesnegriimoveis.com.br
staffme-api.staffme.fr
staffme-api.staffme.fr
live.aku.edu
account.staffme.fr
www.staffme.fr
bony.lokalnyrolnik.pl
account.staffme.fr
account.pprod.staffme.fr
staffme.fr
api.ppd.staffme.fr
api.ppd.staffme.fr
raptor-integration.growflow.com
help.staffme.fr
account.staffme.fr
help.staffme.fr
www.staffme.fr
account.pprod.staffme.fr
sureshwheels.com
api.ppd.staffme.fr

Certificate

The complete raw certificate details for staffme.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgISAw56maHs0R90ibVtH1VoOPtpMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA0MDcxNTQyMTdaFw0yMzA3MDYxNTQyMTZaMBUxEzARBgNVBAMT
CnN0YWZmbWUuZnIwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0Vro0
VdpkjYOnAiUEJI2ROLJqFYjgCfX+qo487SczPyZkgVaUWnN2G5lp7rHtBz7zAY+I
/Tos3lDDSr44r+3dnAAWmDdtQD+87JJSyBgpuhWhtxfNudp2xmtmW909z+j59kMZ
rusC4QeUKDlRA6R7gGpwrlx9H8rgXucRxKFW7yxpQv/Lfj6lL2NZx2SoVfin90I2
HI8H2psnW0WuNj6Q25M7/5NYWQJxxoGJR8PJ1PGqDCDCaFCmZLdCmz1o9/n4lyjJ
k/Xcya27ALk4HZSJMv/x0mwoz5X707Q030ZBqkF5ioz+LCsbCJym/R0iZMNkIWUY
Z+evgkIbdenacMfKJpKFGiEhQbBV5SVAE6bwOdrHN21XjHB+Pa/IN0v0nqD5LESC
302Ty3pdk5DDypo/ALdPahPams1jAamWktisA4c0zybKRnegRZK0Vj5OdV5w+gNE
pZiTBcj3kpghzI/qIx8+XNgQ9C6+67z7U5RkmNaFQWFX598arSUTLlYCU5znIrou
Dzk3LcOjnPZ42VP1o2tGCOvAk0NTbAkSk/HHBYZ2MP12NlFTxpWOkbG127k8vf0s
gRaOur7Vj7WGQyPn667++EhLBCN29ZuzEvs9llvs1JKb1AUWPPzh6nKRBnosC2CO
ZckzDDVnuncZIpj6WDUlk6ATZQFc/y/2y7+i8QIDAQABo4ICVzCCAlMwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTEexp22Un18sONrFYb0/KcPYlZRzAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzAlBgNVHREEHjAcggpzdGFmZm1lLmZygg53d3cuc3RhZmZt
ZS5mcjBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkC
BAIEgfcEgfQA8gB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAAB
h1yY6R8AAAQDAEgwRgIhAK2CG2niXfebisPjS1JbO8npxendwXxtWXZwGUomkK7n
AiEA24f6DINJf7sGNG1Yevh4QigjF39VLTjq1ieMViUpUqkAdwCt9776fP8QyIud
PZwePhhqtGcpXc+xDCTKhYY069yCigAAAYdcmOkzAAAEAwBIMEYCIQCC/ikPkDGM
DZAaSsMSesKTD3FwVodHY9X8YO44n/NFJQIhAOi0WO5g+Id4oQqgaWJUR2CvN6LQ
BJuJ4LKixhoyqz4QMA0GCSqGSIb3DQEBCwUAA4IBAQBw6fMMdhlXsmZDJawGdtYP
iE8xHayRhg8KEnAm25S+19NoRfkbwJyuvK+U1fbxkEDUei50xKPfMZY6jveD2Iug
47e/eDvp6NNivJZw2gD72wpeFCMFrGc7DlzbP0bCvS3Mzca//w0Nc4pEhB/oM/P1
ElKfXviv7QIiQvYJy/Ina2K+wEhc7S2IklCYKIv2T5BWoVp8stVFldc4MLCHaxL0
X1LfD/m5QN9KfxbQULXmb7Vu4qZKrF94lUvRqzGeUm5Y4HfMIpDcbJYGPqzs9u6m
9nfT1MNmwjYbcVWrE8K75SB/oCqXaxnOI34RV2aAlfDYCg1QTZTg4OY+T2MtrAfk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266263774453309506928853552830109099555689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-07 15:42:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 15:42:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staffme.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735718028978551387486349391235911410317800898335505518612432221973752505967971444544954668400979583331404724774748292580159291426178749806679225861438018963880186715951376206117484574722032533735747866433678473228683150898889099137871057778008212632551992094906555783112124506945501123430082150976106400303759526993753305969684144750764373318900343924935935431023542449568546602791725140747472782814735410030877394455963730037606416349669003131139981681611033982466879589699022532898655451203002484396387081616891264954332319246401538861088780778751024817006740165017463272492817499037822044958087473604394597544290348411640504719528301126416537316657884579598009204328782970135630071144931666405571075399897893068996082505659811243179318336187422173868791368011801811499286436003748036567833532406680698219279791707944951934642516306896884104609860677849714290041966377325940463886321085282265837130609148131685274328846206938386012424033651846328425610802697927522622831403487051749620501754955052716143625691841339766840615935684528934702981726888263191312906362450379841354376930513265481687543211482774119662891201519789588550003321768126589517020606164888594360521004575250125600999000010659098597120929719700601479931388470001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c47b1a76d949f5f2c38dac561bd3f29c3d895947
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staffme.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staffme.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001875c98e91f0000040300483046022100ad821b69e25df79b8ac3e34b525b3bc9e9c5e9ddc17c6d597670194a2690aee7022100db87fa0c83497fbb06346d587af878422823177f552d38ead6278c56252952a9007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001875c98e933000004030048304602210082fe290f90318c0d901a4ac3127ac2930f717056874763d5fc60ee389ff34525022100e8b458ee60f88778a10aa06962544760af37a2d0049b89e0b2a2c61a32ab3e10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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