bases-alienor.wedia-group.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:4a:5f:47:ff:62:5d:99:9b:26:0e:19:e9:9e:f0:f6:6c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bases-alienor.wedia-group.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:4a:5f:47:ff:62:5d:99:9b:26:0e:19:e9:9e:f0:f6:6c
Serial Number (int): 347186871859531583302715473232067420026476
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:a1:99:9f:04:a0:2c:d2:27:00:92:8d:fe:91:56:fe:1f:5e:d3:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:62:9e:64:61:93:57:c4:06:52:a5:c4:ca:29:aa:79:26:08:41:74
Fingerprint (sha256): 84:5c:78:ef:e0:54:6b:cc:ac:61:99:aa:0a:9a:d1:fa:09:e2:f5:f4:4d:cb:8f:31:46:8d:1d:25:99:1e:3a:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bases-alienor.wedia-group.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bases-alienor.wedia-group.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bases-alienor.wedia-group.com
bases.alienor.org

Other certificates including the domain name wedia-group.com

(limited to 100 certificates)
go.wedia-group.com
sl.wedia-group.com
www.wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
copper.wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
copper.wedia-group.com
wedia-group.com
sl.wedia-group.com
wedia-group.com
brandcenter.enedis.fr
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
copper.wedia-group.com
*.wedia-group.com
copper.wedia-group.com
wedia-group.com
copper.wedia-group.com
teampass.ibrams.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
sl.wedia-group.com
copper.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
teampass.ibrams.com
wedia-group.com
brandcenter.enedis.fr
bases-alienor.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
*.prapixl.wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
*.wedia-group.com
wedia-group.com
copper.wedia-group.com
go.wedia-group.com
renault-trucks-pp.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
bases.alienor.org
wedia-group.com
wedia-group.com
brandcenter.enedis.fr
wedia-group.com
bases-alienor.wedia-group.com
bases-alienor.wedia-group.com
brandcenter.enedis.fr
wedia-group.com
casa-test.wedia-group.com
wedia-group.com
engie-servicesv2-cdn.wedia-group.com
www.vaillant-germany-stage.wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
*.wedia-group.com
wedia-group.com
wedia-group.com
teampass.ibrams.com
wedia-group.com
wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
*.wedia-group.com
mediabox.erdfdistribution.fr
go.wedia-group.com
brandcenter.enedis.fr
wedia-group.com

Certificate

The complete raw certificate details for bases-alienor.wedia-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347186871859531583302715473232067420026476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 07:00:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 07:00:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bases-alienor.wedia-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4310886541397745273182074188244870852435962381189311399009150517667341756538693221859312662549920284122274617508199961259186340908379732986187710839452628257682026254873828429649364513357879171471925223914718915838662644610754626605504219372547731424648022951738368485673268161748557213149437120185202557431785382727124144955911900137779763438783658002488363784764223820673960053620181379231699298337829724549224734881974132586698035580507472013166453680339164077032371365968838997117408393187385095058489539808537316105749836275736268732266650557490855609034894468548073527511258215232055065656277366358643696811900010791371733550326411924914821244748527178909933089845121527661627556445462386849758373315751074250779339378140673703019688726515696218070178327446157363517067290657294013817004198906402030017703621841494460979824582121694328175566201518297795420560529368897341677036286472047375651486904176728386896033871617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6aa1999f04a02cd22700928dfe9156fe1f5ed38c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bases-alienor.wedia-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bases.alienor.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001701eaa1a230000040300483046022100cb3dbd8ce6ca984e9ae95440567613bf98f4874630424acc00cfa872f03c96f2022100b43f63a5c3ed9189ac79140f982306bb9a552cbe182001c52f56f321c1b1663600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701eaa1a7900000403004730450221009444c88f08aa1d33b0bdf78b2939a2f142c1214d64c5dd796f27edfff0768dcc022075e953c8d6d61acb712219ac52520276993e5986bd83211f17399841aa755dfd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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