arseus-lab.leclubavantages.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:36:0e:8d:14:9e:c3:4e:de:9f:63:2e:18:b6:01:66:3d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=arseus-lab.leclubavantages.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:36:0e:8d:14:9e:c3:4e:de:9f:63:2e:18:b6:01:66:3d
Serial Number (int): 318576149303380258856150899388673926719037
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:57:01:7e:2d:7f:a0:ad:a8:44:a8:bc:11:67:89:1f:9c:55:1f:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:84:ea:63:5b:6f:e9:8f:ab:82:77:c7:2d:98:eb:55:25:34:5f:b7
Fingerprint (sha256): 7b:a8:2a:6e:6c:db:a9:ad:ac:0c:6c:b4:0c:15:e2:a3:29:c1:50:b8:64:24:79:92:21:f7:a4:01:2c:a1:00:c7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate arseus-lab.leclubavantages.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arseus-lab.leclubavantages.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arseus-lab.leclubavantages.fr
www.arseus-lab.leclubavantages.fr

Other certificates including the domain name leclubavantages.fr

(limited to 100 certificates)
microvention.leclubavantages.fr
*.leclubavantages.fr
leclubavantages.fr
arseus-lab.leclubavantages.fr
*.leclubavantages.fr
skalis.leclubavantages.fr
grandelogedefrance.leclubavantages.fr
dugas.leclubavantages.fr
skalis.leclubavantages.fr
plut.leclubavantages.fr
lesbienheureux.leclubavantages.fr
demo.leclubavantages.fr
ergonova.leclubavantages.fr
*.leclubavantages.fr
grandelogedefrance.leclubavantages.fr
pharmaspecific.leclubavantages.fr
motovario.leclubavantages.fr
lescherubins.leclubavantages.fr
wereso.leclubavantages.fr
arseus-lab.leclubavantages.fr
skalis.leclubavantages.fr
ergonova.leclubavantages.fr
*.leclubavantages.fr
*.leclubavantages.fr
wereso.leclubavantages.fr
dugas.leclubavantages.fr
wereso.leclubavantages.fr
audionamix.leclubavantages.fr
charpentes-calaisiennes.leclubavantages.fr
leclubavantages.fr
charpentes-calaisiennes.leclubavantages.fr
robertf.leclubavantages.fr
leclubavantages.fr
arcynerj.leclubavantages.fr
leescomorlaix.leclubavantages.fr
*.leclubavantages.fr
tisea.leclubavantages.fr
schermesser.leclubavantages.fr
lesbienheureux.leclubavantages.fr
skalis.leclubavantages.fr
sunzil.leclubavantages.fr
trm.leclubavantages.fr
audionamix.leclubavantages.fr

Certificate

The complete raw certificate details for arseus-lab.leclubavantages.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Fd+J9X4MbuGyEsx+2Aa
zGil0dL1MxgMUvKRiy1siJBTpGQ34SFO3v27LzriWdVMdaYHywzKaSDo+XAJmg+0
k9U7D5l8Y81h0Oei0bNfgV/viBmhwAwiG2fKMK6UGFFhbiv1fWu1/qqaNiUxTces
1v1Jr1mZemyY1O0apM/EBWvUJIPeVGJ5DpM6xJoxkZbjLFS1OASo2XSjP0TVD7tc
JhJf5Mtbu17aWXVAeSsMr26wONmOMXaTcZ1zrWfws3i9MCn5u8H0cvV3JaHaAR79
O3SQBlZGMi9DE+hDSW+bqXDCfky63BNhp7Z+v4QrCcV9cuXb8l27vOvRsXJTqrG0
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318576149303380258856150899388673926719037
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 12:20:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 12:20:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arseus-lab.leclubavantages.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31350243936978106629783619654087836189925664440875171633593224017204500426723297931482329008869386844813003095283974344516231372062710910580599448702758033661699454923149025173453225025539913103820392944031730481248016207984636441280320449652093122337989915442296067195493117700449986012937934852325411633767553587575912977486307505605968289877273602893997383255586123858370283594548456938804097139198184413621780780754058718536102669274380248677180867461307245478810616981075875626022551842695405565141025696234158567052406109178323701749030865623297814171587887659392757770636713398995605823734552620178617968735479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c57017e2d7fa0ada844a8bc1167891f9c551f4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arseus-lab.leclubavantages.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arseus-lab.leclubavantages.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016519b29a1800000403004730450221008f0a1b981080079eb6cc10b81ffe9ec5f5b33980d7fdea536e339033e09ed1f902200ea86864a9a1fcefa6ec18ca4648b8293a52f83e104c861e3b50761593d2e965007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016519b29c240000040300473045022100df04fa78e8b6aacea031a2a23fe8ed366363b794d39505ac98e12d308bbccbfa02203e8e971ef08cdb5a4e25677c4071629f4f8a1cb8846be7ea70569d2289da0b8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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