usa.paultournemaine.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:0c:a9:88:07:42:4d:60:88:12:98:51:37:87:e3:20:93 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=usa.paultournemaine.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:0c:a9:88:07:42:4d:60:88:12:98:51:37:87:e3:20:93
Serial Number (int): 323625361934913812918033945586876369019027
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:b4:f9:5e:18:45:e5:16:fe:b8:ff:8b:c0:2a:07:7c:d3:7a:07:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:4c:4c:b2:75:d2:f5:12:d8:7a:3b:62:a2:1c:b0:47:32:86:3b:87
Fingerprint (sha256): 6e:34:cc:5e:ed:9a:62:a0:a5:e7:02:11:e5:cb:de:b5:d9:81:99:c9:57:13:bf:00:ff:21:15:d1:09:c9:a4:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate usa.paultournemaine.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usa.paultournemaine.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usa.paultournemaine.fr

Other certificates including the domain name paultournemaine.fr

(limited to 100 certificates)
nationalhippoday.com
buffet.oasisdigital.com
laughsavers.com
jansen.digital
viewsme.com
staging.smartweather.weatherflow.com
chargelator.paultournemaine.fr
kitchen-sink.ankemp.com
aydin-arch.de
app.minharota.com.br
cast.paultournemaine.fr
apftapp.com
edm.karmayasa.com
charge.paultournemaine.fr
usa.paultournemaine.fr
hasan.id
www.kodiq.com
usa.paultournemaine.fr
www.decisionlab.com.br
us-elections-2020.com
manage.allcore360.com
lemarautos.com.br
bluekittens.co.uk
apftapp.com
dashboard.e2e.agency
michaeltangen.com
kpi.thstecnologia.com.br
patugo.de
hugo.paultournemaine.fr
usa.paultournemaine.fr
hugo.paultournemaine.fr
board42.com
www.bevyinsight.com
charge.paultournemaine.fr
www.bluefishfoundry.com
dateknights.co.za
chargelator.paultournemaine.fr
www.composingstudio.com
obf.xedra.app

Certificate

The complete raw certificate details for usa.paultournemaine.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323625361934913812918033945586876369019027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 18:31:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-09 18:31:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usa.paultournemaine.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763631384567849852526974679496519257063803480356348238543804614811618709326520044928935596620064260667757652425200125434983107027543135731441698697834063559600921342084804060887163326111404696455978605484105394109385654285183629167590071774450926561590044694394840869537065382267200093262165409224604515105308397106960427471059000185179407450484759943460638878533207971889928037174615321473159938629212464675189870926687071326808092880187913635834326604057296891898725283632294231418871384879615355689397953012642915405994003652171043021520943834031375527887562714645042070072286643779319906007718634659958070569814960341019063111180425103040454162035154585615668205104814431809719874110352062112776396023264666825912916796739637414592666784932346213384439691159349819326758650314209129672403275183132958062318647296963901405643190790371289395599726519096871602937243562285228784853054021525205639424768443085615723449366218331054233038094546486277804193479350647482783421744400575173146660090092870908174942188017067243144860455891338940655118341441652807786146007670255116131327501756151188322761557741329901571486749064253137385408269468259578843628809934808883208027824404597178510523865676889083588778669338916315365183251594851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adb4f95e1845e516feb8ff8bc02a077cd37a071e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.paultournemaine.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001679473b0990000040300483046022100c6c7880de2939d20e6ef3491e3843e0deb0bb75dd5e107d0ed7fc7a9e3de6371022100a48525ecef9c419b8f80e79123391fc6fc5a7cffadbf822851eb16e4263f306f00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001679473b2d7000004030046304402202e37bab05c6d643c5c30b2e59dfc23a313c5d9a30741518d35a4997472ebb3e0022033de56b13a2d727202427e0e12ade0d2531366d2759be97c63f13056884330f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003caf406451bf8fca7f3a0c9791212210846ad4fcd1c2e834ab6d2ba4a2435e19aff64d524010f87f9e85d1cc8f384089574db6b912df48a80b56e7f43cb95e19b6a4c8efbb2d338c75b77359ebb89dc3ed930cd0c5418fd7c24e41268e778d104d02c67df19dd027fac725e32ed216e2cb60393296d34946c5e4f7532a23fa1e43277e21e96315da30a56da66e3ba39b01b003039d9e834c6bc28699b5aaa8c699bb722203e77225819e30e5a2cc42c5688af6d591577cf91c00670f88fe3f910cfa30cadaa61f4ef0c751757ac120f5afa620dcb2c5970eca722524b02ad27a299018dad167359c485edc74a7a635a2dbd449b05011fb950588b45fedf466df