www.atelier-de-la-foret.fr

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:d0:4c:e7:7e:37:3b:e3:f2:74:46:33:ef:4c:d3:d7 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.atelier-de-la-foret.fr

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:d0:4c:e7:7e:37:3b:e3:f2:74:46:33:ef:4c:d3:d7
Serial Number (int): 3740013542042379196628504805204874199
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d4:ab:ae:f5:8a:31:78:7a:09:0c:7f:a3:86:74:96:37:87:a4:65:d9
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 20:d8:34:a3:90:61:1c:3d:9f:a6:c7:ba:7f:ab:2e:f8:ac:6e:0a:e4
Fingerprint (sha256): 6a:62:57:2d:fb:7c:6d:4a:30:ba:c5:40:a8:e1:5a:c7:cb:d9:32:77:e2:b3:95:4c:f2:93:e4:d8:19:e8:4c:88

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.atelier-de-la-foret.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.atelier-de-la-foret.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.atelier-de-la-foret.fr
atelier-de-la-foret.fr

Other certificates including the domain name atelier-de-la-foret.fr

(limited to 100 certificates)
www.atelier-de-la-foret.fr
www.atelier-de-la-foret.fr
www.atelier-de-la-foret.fr
www.atelier-de-la-foret.fr
www.atelier-de-la-foret.fr
www.atelier-de-la-foret.fr
www.atelier-de-la-foret.fr
www.atelier-de-la-foret.fr
www.atelier-de-la-foret.fr
www.atelier-de-la-foret.fr
www.atelier-de-la-foret.fr

Certificate

The complete raw certificate details for www.atelier-de-la-foret.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv78wW/ple+sbRrk/DUr6
M1fOT0hRD9obRfFSw4kNPCXH0O/Bk3eQEVbmpJSqcjJBJYgi8HKsntnmGtqtYROe
YMlhidgYDjZ0gTnuANbxclKY+B+X0kupMmOIfNonn1KK4kIac4e0W6aisew9D2pY
325snTOe6bPhbvxf09wbiF2jUfqUaW5MT13sGY5wfGuePhnhrTHcD3ypKeyvtURC
koLQ22Z4qE7Oa7+mWkNvErx0EfkWuULGxQGO8/AJI2TFsqmmAYjPB1e8U4qjbq/g
TD+m1weL9AS2IdaH/+Tlfj8FN6K41FHkt2nLe6ts4iKVzGxQbsWaPK5G/9P7Dwro
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3740013542042379196628504805204874199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.atelier-de-la-foret.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24205795010638103895689190687240127652839459403793936903340753233199154468499800610144103929807551684402743084755924186810134050865579640712545538369838080336842643320951688567471016456267354627635261596206442178051081827043198838956654898036773221034541549884969529086788909334966475376494190368030895606433301471282836977609295520970668918996558622853075026859729272664455595002090550090916657324868903039427744686301250694108003113442450657588637572952967194344891128561928396645042298893226730017242258186710807171561378212991470100523194126704799733112255541108997727085902841690995317383001912651164076078721037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4abaef58a31787a090c7fa38674963787a465d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atelier-de-la-foret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelier-de-la-foret.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001846f32eb4e0000040300483046022100a21448d0a0dff6bc5a99abad0eab0631116b8bd1fa9ac248af1d632d7e29995b022100adde50afddbae5d2eb94e77d33e87b3ff371983b2d96b8ff23252f614630ef63007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001846f32eb4e0000040300463044022069204ab7b7a2b17cb307be31fed4d00e3e9df5ae592eb9bb327df3c0ec2ab87a0220041c08230818b72db40f64961bc51ad91c0a01506202d4fc5fa946c887b55675007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001846f32eb0d0000040300483046022100f7d2daaaf7e37489c29ac4de2f00c4ee16715223fa4d4c2fa35a2db1521b32ef022100eba09aeb98988252658d1f00c2d9342ee2d241b594768dce39154476caca1927
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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