aupasseurdelumiere.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:4d:9e:5a:ae:fa:7c:8d:5e:e7:ba:a1:f9:e2:58:c5:f8:54 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aupasseurdelumiere.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:9e:5a:ae:fa:7c:8d:5e:e7:ba:a1:f9:e2:58:c5:f8:54
Serial Number (int): 287749088927229145180849158731967689521236
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:e4:ff:1f:e5:15:84:b9:88:25:ff:3d:35:b4:4f:5f:9e:98:60:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:83:9c:aa:5a:c7:6d:dc:cd:0b:90:25:d9:77:87:78:aa:11:7f:00
Fingerprint (sha256): 85:ae:4c:48:d3:aa:e7:f7:4b:9f:6b:fc:25:23:b3:f4:f3:00:a6:b9:1a:75:68:6f:81:a3:0c:86:5d:55:a3:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aupasseurdelumiere.fr

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aupasseurdelumiere.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aupasseurdelumiere.fr
billet-de-train-pas-cher.fr
mrpat.fr
noemie-riom.fr
o2concept.fr
parentheses-castres.fr
ravalement-devis.fr
restaurant-le-grand-joly.fr
schaeffer-dufour.fr
son-meditation.fr
www.aupasseurdelumiere.fr
www.billet-de-train-pas-cher.fr
www.mrpat.fr
www.noemie-riom.fr
www.o2concept.fr
www.parentheses-castres.fr
www.ravalement-devis.fr
www.restaurant-le-grand-joly.fr
www.schaeffer-dufour.fr
www.son-meditation.fr

Other certificates including the domain name aupasseurdelumiere.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for aupasseurdelumiere.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287749088927229145180849158731967689521236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 23:45:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 23:45:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aupasseurdelumiere.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694044937194594743068226750345197886282496951763191398592303727375263890144260169853183050973705590993760770592914185853356194225635057768177635660569322973401205748052803295392659940964221643659499480758229105744842048511376276935626685089310707138605652421126870878673762611909013552613868454617502331360657241853132400459174190003520120811079191559887909808929472793077843786409854147411005865261237660362511847226952469623573056080548738066894058881459569051889001735067581375268124891526431126186642039749016514134612442652211861131395017920657236312683955453068670361597565279103483720144257531200234927237984406241996744352473996542044237614705277614280045314042316535692044736651514497845716048608469974006167335986528443369430239364166201556772660944616586114490865111818126150429614011905248040096674698674319374833479317266657944811765326414802483542021197129345473975028232828241847357413028577680458059947121087637769395529589480059714906256865149583091051378798095107549755043823766517520422527896258504164920490323610004874367057392056239065213293364412639821331054386812005281477169982475789944460077042034392295141783231812474440198731881735892830574370303584227599843674608614480104194690376578533023490131841445193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8e4ff1fe51584b98825ff3d35b44f5f9e9860fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (456 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aupasseurdelumiere.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billet-de-train-pas-cher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrpat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noemie-riom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o2concept.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentheses-castres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravalement-devis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant-le-grand-joly.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schaeffer-dufour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'son-meditation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aupasseurdelumiere.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billet-de-train-pas-cher.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrpat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noemie-riom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.o2concept.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parentheses-castres.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravalement-devis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant-le-grand-joly.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schaeffer-dufour.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.son-meditation.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a2500bb99000004030046304402202ff9bf387d6c40c74aa14fc41c281c47a1ad35505bb450c29656e8dd13e1cb8802201958ccac15a7a493f17c903a571c1a8e4258ce19e5d662e424ae8fd3f79ed797007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a2500bbfc0000040300473045022100ffdf1291c79a60e08e1bb36c0db40f2789b9e7ab9e48d0bd2a6c9493a167ec8d02200cf6d7b62a51f82861aebd26815de4e54d42daf0d5543ab8fda20349059e123e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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