*.castor-informatique.fr

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:6f:26:ed:9a:00:d7:d1:c2:ff:78:5c:a5:87:8c:37 was issued on by Amazon.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.castor-informatique.fr

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:6f:26:ed:9a:00:d7:d1:c2:ff:78:5c:a5:87:8c:37
Serial Number (int): 7223274486523110566111590723772451895
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 93:29:b4:d0:37:7c:b6:7a:16:ec:da:0d:0d:d6:97:6a:7a:82:6e:e2
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 15:ec:a2:af:a2:fc:00:fe:67:aa:34:ba:1e:25:ef:df:12:77:39:51
Fingerprint (sha256): 6e:75:4b:07:37:ed:45:ac:89:76:34:a1:6d:b0:83:89:07:03:bd:ab:e0:a8:5d:9b:21:cf:77:3c:a7:79:c3:06

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.castor-informatique.fr

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.castor-informatique.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.castor-informatique.fr
*.es-platform.quick-pi.org
*.beaveregypt.org
*.concours-alkindi.fr
*.cmental.algorea.org
*.it-platform.quick-pi.org
*.concours-alkindi.epfl.ch
*.algorea.org
*.suisse.concours-alkindi.fr
*.concours-alkindi.org
*.quick-pi.org
*.bebrasksa.org
*.majava-kilpailu.fi

Other certificates including the domain name castor-informatique.fr

(limited to 100 certificates)
coordinateur.castor-informatique.fr
castor-informatique.fr
coordinateur.castor-informatique.fr
concours6.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
www.castor-informatique.fr
www.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
concours6.castor-informatique.fr
static4.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
badges.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
coordinateur.castor-informatique.fr
coordinateur.castor-informatique.fr
*.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
www.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
castor-informatique.fr
*.castor-informatique.fr
concours3.castor-informatique.fr
static4.castor-informatique.fr
concours3.castor-informatique.fr
badges.castor-informatique.fr
coordinateur.castor-informatique.fr
*.castor-informatique.fr
concours6.castor-informatique.fr
*.castor-informatique.fr
castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
static4.castor-informatique.fr
concours.castor-informatique.fr
coordinateur.castor-informatique.fr
castor.epixode.fr
*.castor-informatique.fr
concours3.castor-informatique.fr
*.castor-informatique.fr
coordinateur.castor-informatique.fr
badges.castor-informatique.fr

Certificate

The complete raw certificate details for *.castor-informatique.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6oH7YkBKCT/y4n7/ASp
tygIH2pyzdU4Kosu336wyJIj9FhUHoZuCyLiHzlqNJ7se4utlmn/ojYhFG9I5vv4
ghrjVj/dc7EM4/w48EUjGF19ZEn4lxaRDDZNE+s8QuO4DVnWNZsSGeDzXROZuBgz
XylvsC7BzoYede61u5jd6fohjMH+uUnWtsnjVCE7SasQqbfiiFzluPvDVY1xi4l1
E7G5i9tdTcUahbrLEdGunujeDgH8o3gJBrU0VQP1uZMR57JpnstTNdeFhBpoDtnR
QdHR2hM5xwOQmNAMnfwCbXowc1HjoekORYO7tqG2BRfC4aDg1IYlvr5banETDhtm
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7223274486523110566111590723772451895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.castor-informatique.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21670595544600344014286405669064474804938437817448092456544423338836467797056569066257678682425034651418007057807785972527149617319961642822089633753477406872382993062633893115489115437336622223059883544368409273450067205899694859384336243308430233938674826774178465131160867393966111897834818642933565759312636925517239618621466114486234021554297981500407873218382192582471580205492456187104383890754235128361011769865639275187198965891528057630169582766990115147378842153776502061125665353049962329480408319535477860420528095379360312918997705226291510333799414682482633054603932353963177504285224069508847139251817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9329b4d0377cb67a16ecda0d0dd6976a7a826ee2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (303 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castor-informatique.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.es-platform.quick-pi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beaveregypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concours-alkindi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmental.algorea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it-platform.quick-pi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concours-alkindi.epfl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.algorea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suisse.concours-alkindi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concours-alkindi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quick-pi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bebrasksa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.majava-kilpailu.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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