*.routhiau.fr

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 05:9f:5d:cd:b2:42:1c:91:f0:74:41:47:b8:ad:1f:c0 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.routhiau.fr

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:9f:5d:cd:b2:42:1c:91:f0:74:41:47:b8:ad:1f:c0
Serial Number (int): 7473617740466327757653962227817717696
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 34:39:fa:56:f5:a1:d4:e5:65:49:8c:50:fc:be:c7:04:55:26:1d:23
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): a8:e9:2c:e3:a6:91:95:70:3e:21:b5:c5:77:79:15:f0:66:9f:38:52
Fingerprint (sha256): 92:02:0d:ad:8d:a1:8b:99:c5:27:8c:ca:92:28:a3:3a:db:58:bf:bd:e4:27:00:df:d1:a7:12:30:61:1f:2f:64

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate *.routhiau.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.routhiau.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.routhiau.fr
routhiau.fr

Other certificates including the domain name routhiau.fr

(limited to 100 certificates)
www.routhiau.fr
*.routhiau.fr
*.routhiau.fr
*.routhiau.fr
*.routhiau.fr
*.routhiau.fr
*.routhiau.fr
www.routhiau.fr

Certificate

The complete raw certificate details for *.routhiau.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7473617740466327757653962227817717696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 12:44:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-12 12:44:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.routhiau.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755483133312668067850922599830399372582760486694205665035469301331803037499008559028208577797378205963915009319885982587866007208901656747535960594896661855707355704461791328732215932085038940516324098078448382783377860361266669571959909672947890467284859069095211628165573881610442321270096937585566485702107776447352533995307798832283529321461254687347149637691715760000359155683746402211300332517642443806647619261299089807862206472792270186314783292067940090178781931703109443875628255040228379710679579818952690790040842995300323504651744388632046997197375517879306737944627167911710692922307857891914812990896275278670089621766218806328432703480195254196221422912911366615389603881240911722027239962475908283335677842538769457177656935552012450045842793739028895691733750917089886902728698291539688130184595420292822253740385704738599664125827241800713641145366092031019424513224776402539102869133002146232360561214640893965827093677215234475427072177141069678738431080232538825953485867228095010330126620917728125891555857750884426310291063821589452555810717992101521749354424479802591248751284116922918363647697350580793837704826443067035120997782577627816324598376232530392206553705005841653158480365307355434410051038642467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.routhiau.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routhiau.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3439fa56f5a1d4e565498c50fcbec70455261d23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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