www.daitauha.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:1b:6e:41:38:d0:e4:3c:0d:66:80:41:ec:4a:e7:6e:bb was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.daitauha.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:1b:6e:41:38:d0:e4:3c:0d:66:80:41:ec:4a:e7:6e:bb
Serial Number (int): 326367251508578668159860064664854829952699
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:86:b5:ab:ab:25:25:b8:27:67:29:f7:1a:e5:70:1d:e0:2a:19:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 70:c0:ee:47:02:3b:06:4e:a8:a5:33:7c:f6:4a:c4:54:39:fd:1f:42
Fingerprint (sha256): 8d:51:eb:cb:bd:34:a2:a4:4a:a2:98:36:b2:ca:85:e6:53:21:d2:2b:39:6e:4c:68:ef:35:25:56:c6:3c:fc:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.daitauha.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.daitauha.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daitauha.fr
mathieu.daitauha.fr
www.daitauha.fr

Other certificates including the domain name daitauha.fr

(limited to 100 certificates)
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
xmpp.toniob.net
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
xmpp.toniob.net
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr

Certificate

The complete raw certificate details for www.daitauha.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326367251508578668159860064664854829952699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 14:40:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 14:40:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.daitauha.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868024005418154627933498531024615520115598843803644655272533031456920296789473163814522912080836873601991416509117506770302258641905571486644203257481638591612789444420641603020970167375142416670491307091025679802340433026614888123473740208130211695254294431890957935093586156553755210375314080240997732060469023601544948149865503694308182667174305762649897461259396811278105444270174261161673195621464478049211660844517187920639089284771941868768315926360989635192471895311985484319772898968834422454129750145860809612888698063453314753951974713473028016076399194626936193170630914872528186278861176967670379713920629216746897812377409284165623553765051742973377539383252090540907308162504019999041745136666099399097589186360320630092875421158906787254571197057942569967185889857520033687111369785274667707339131534672978151332334806618037371102974165644131023287374879690180873149764286178213172371332786489600029435238689756355370583937470744967554527775607583914875006087827962003747977225282270424824890940676414558523709163216929306356849710263668453275501111184517907693035780691281736389843259628485164739852645773264083185391242114554805563935879126373855324877012655402603665148018058104604961302001840246701384308559521699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b86b5abab2525b8276729f71ae5701de02a19f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daitauha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathieu.daitauha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daitauha.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164ae0c81ca0000040300473045022100c29298dfc146bb29de295b4a50706cdae259fb96919e6c29bc2f88bed755770b022018ca00349f259cfa1da75041bb7e601b1498039c69ce5ae5491f601851a6584a007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000164ae0c8589000004030047304502206aecd32a1b435097673f68fd8c249d14b2495458162eb87e9c66c746386234d602210081e2c99ae3723fe359051e6eb5bf22a3aa33920c65b087871b079342c95ef499
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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