f2a.fr

Issued by R3

About this certificate

This digital certificate with serial number 04:16:53:96:a6:3b:75:15:f5:d4:2c:5b:11:b1:b9:5f:8e:ea was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=f2a.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:53:96:a6:3b:75:15:f5:d4:2c:5b:11:b1:b9:5f:8e:ea
Serial Number (int): 356046463939071253113289024722103544286954
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1a:9e:c8:db:f4:f3:5a:82:ef:bc:18:c6:28:12:04:47:80:26:64:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:73:1e:ab:94:b6:3d:17:06:68:a2:36:7a:87:ca:f9:8e:a1:19:ea
Fingerprint (sha256): 76:a8:ab:b0:42:e1:bd:06:f4:66:41:d2:79:56:12:9d:fd:30:b7:0f:1d:c1:57:8c:8a:ec:5f:cb:a1:58:00:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate f2a.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f2a.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f2a.fr
www.f2a.fr

Other certificates including the domain name f2a.fr

(limited to 100 certificates)
www.f2a.fr
www.f2a.fr
esonie-test.f2a.fr
www.f2a.fr
f2a.fr
www.f2a.fr
esonie-test.f2a.fr
f2a-preprod.gtec.pro
www.f2a.fr
f2a.fr
f2a-preprod.gtec.pro
www.f2a.fr
www.f2a.fr
f2a-preprod.gtec.pro
f2a.fr
f2a.fr

Certificate

The complete raw certificate details for f2a.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356046463939071253113289024722103544286954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 07:07:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 07:07:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f2a.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919097624028871109047999609979973667683430422132056294068651270750451039346163732724065054985788971626022753948212250810764240628816528798305976832420613746663648326497303817130085647887807167407260775426777940886540794653813972927452255971999758859100482680725874857870746071426423434964626465230064166739992328127045480775455233643851928024576424665389815932071005030687713487270894086441329058575421473836478438282987386400042523270595857865243035080997797940141160825051138297239083042909912178504741963647532061580185275113241044976506838002713627882447533341120100554446075287497615386161924450549716272825832800324244631025157114314222855951330024164093021454629495619682561706330512701739987617461749928101676271576693918253830336491718258800455924869833076626864744090422412441631175296370078769461391361829289653105452345368919234571108260832062496151250302005071469438703443312108819621373916417710090924942518121982616342294532474396812901359532499135787540977691410078075649479852201163594291625324083602449398045241865321770201241817805121874487351333122327980625918977290669254568520850514907911605231566732675974862978705969294287586849447456148164835345677082879027339677128188411966320814981860836049501843333899463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a9ec8dbf4f35a82efbc18c6281204478026648e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f2a.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f2a.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018793678f2f0000040300463044022057e7aadd01c9e4b98538994b0a06ac805dce74bf7c3b3d6884e82e56a5bda4ff02201e4627391c0f100daec2d701332122f5d317720754d1c438fd11c9dc4c2f2904007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018793678f30000004030047304502206f614fab1e24d44793b515b01bfc3b4b1309de1f8600730fdc91cbee8304f16c022100ce539e58e84e332fd88c2271f389822f108b6263fa9d0ae3da3568a2aba58fe5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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