*.routhiau.fr

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 63:9b:b3:3a:8c:76:a1:7e:84:95:fa:4a:a6:eb:3b:05 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.routhiau.fr

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:9b:b3:3a:8c:76:a1:7e:84:95:fa:4a:a6:eb:3b:05
Serial Number (int): 132402012785803366432786741429751462661
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 34:39:fa:56:f5:a1:d4:e5:65:49:8c:50:fc:be:c7:04:55:26:1d:23
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): a9:5b:e0:5a:15:ec:d8:38:89:95:6c:30:3b:c6:42:51:ea:79:d3:6a
Fingerprint (sha256): 8d:85:53:9b:0b:a3:b5:32:19:fc:b6:ae:4b:c4:23:de:ac:47:a9:77:1c:5d:ce:1a:be:d1:75:6e:76:0e:bd:a8

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate *.routhiau.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.routhiau.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.routhiau.fr
routhiau.fr

Other certificates including the domain name routhiau.fr

(limited to 100 certificates)
www.routhiau.fr
*.routhiau.fr
*.routhiau.fr
*.routhiau.fr
*.routhiau.fr
*.routhiau.fr
*.routhiau.fr
www.routhiau.fr

Certificate

The complete raw certificate details for *.routhiau.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132402012785803366432786741429751462661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-13 14:10:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-13 14:10:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.routhiau.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755483133312668067850922599830399372582760486694205665035469301331803037499008559028208577797378205963915009319885982587866007208901656747535960594896661855707355704461791328732215932085038940516324098078448382783377860361266669571959909672947890467284859069095211628165573881610442321270096937585566485702107776447352533995307798832283529321461254687347149637691715760000359155683746402211300332517642443806647619261299089807862206472792270186314783292067940090178781931703109443875628255040228379710679579818952690790040842995300323504651744388632046997197375517879306737944627167911710692922307857891914812990896275278670089621766218806328432703480195254196221422912911366615389603881240911722027239962475908283335677842538769457177656935552012450045842793739028895691733750917089886902728698291539688130184595420292822253740385704738599664125827241800713641145366092031019424513224776402539102869133002146232360561214640893965827093677215234475427072177141069678738431080232538825953485867228095010330126620917728125891555857750884426310291063821589452555810717992101521749354424479802591248751284116922918363647697350580793837704826443067035120997782577627816324598376232530392206553705005841653158480365307355434410051038642467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.routhiau.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routhiau.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3439fa56f5a1d4e565498c50fcbec70455261d23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0001cfe4e27c0124f8202612eeeaaf23068223b901c1b23cff4ea8ef6b59d52b3290d94f68dbbfe4d7205513f69802462e2903fb1c1372f2a8f70126c78dd4d2eb68ee2f6a731725d3fc065fdca12b1221eedcabe00c93c98b1dff4cecf9acac270ff7adc9bf32935892fd26c0f75a92db4c7008a127f99eba5c347856700ae893966b35e52ace783ed308194e1354d8a7eb8d8bfb407febcca10fa784dcc410e3abfe181fb944379632bb81b73ed7745b1567761be25b184130c2caff050931e60aeebc93c3ca6ec7bef90c96c1a50179923afba4ba60757a86cabd3f8e91257de33671e10a3d2d8360a439e97d0a0838e800186e05e8dcf4bbfd734c9888ebdc11f3dabc01a3bf5c5afca4e791c26eb7badb056d371f5ad12023f251578267c7d3c2dd81809986af6cbac99802ccdd6b60968c90ce8eeab368f7d8cb5eeedeadddd36ea970b8dcebda6156b6af3c10cf06b5facb36b36f88080eed04f761ced3114058f43cf275e62c4577cb266fb4cbe140be6156b56c00d30f1b8fef82e8bb84a4e68f11b29b2a6296b5fa619e5076c6d082cc887574e053b94b91d8c5c56b99b3bc5750b383afbdd054b02d83da084e9a6fae8d25da6366758d0baf1743f465c397fe1c568935faacc304f2631cee7be139191c5fa70ca204aab99e61945491b0240b199d02b7b16d19bd2154a28c98a3906355545cc378ea4de65bf85cbc