dfrere.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b3:1c:7a:77:4b:67:2d:f7:b7:1f:3e:6e:03:02:98:6e:31 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dfrere.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:1c:7a:77:4b:67:2d:f7:b7:1f:3e:6e:03:02:98:6e:31
Serial Number (int): 322285255737808231343822354317868879343153
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:d4:c4:40:b6:4b:c9:94:64:98:2a:f4:cc:62:02:06:ea:fb:8e:d3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:99:b3:94:40:b4:47:da:ca:1b:82:45:a8:06:d0:cf:01:aa:33:23
Fingerprint (sha256): 94:9b:65:c6:13:65:ab:64:70:ad:67:67:39:93:6b:11:34:8f:35:d0:01:ae:08:4d:9d:c0:dd:7b:bd:d5:27:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate dfrere.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dfrere.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.dfrere.fr
dfrere.fr
www.dfrere.fr

Other certificates including the domain name dfrere.fr

(limited to 100 certificates)
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr
www.dfrere.fr
dfrere.fr
dfrere.fr
dfrere.fr

Certificate

The complete raw certificate details for dfrere.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISA7McendLZy33tx8+bgMCmG4xMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA1MDUyMzM2MDBaFw0x
NjA4MDMyMzM2MDBaMBQxEjAQBgNVBAMTCWRmcmVyZS5mcjCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBALlj/g8HvFAg7HpyOxB7zkta30dObUhudKTadoXs
wQ0lvc2YwJ9OUQn6vBwZY6oRhq9o6rN+vbi1HFRTdsndT2WfIUZhDJlSzABgBt86
/wrnMecQcPFm7JaxSOEgOaoMbVjga1BfTMN/BLe/3XR97uGOWu6I9/nwQlqnJTlH
iEXXWadmB+RCPvrWL72QMtfTw29CSorjXUapATvyA9Tj4y+wNY2hk2jQpwlPnSF+
OIwbBfYcH+qYqzNuWAvzHqt66UV2pWl+SvzcvatDMNRI/pImkC0p/vYX5pm588GL
dCsi0PX6p0F03Lt9paxb/iuvggJyG3lvWYP7mtek1x5erWD6L827HInV+Pg4PV+u
Kagtf1b/N1NOqiRxhpKZttPTq+ngj/xPr0TCJlt5x7pEM0zoB0WHV8EewQOS/nx+
wyKlgHGY1iv7IZQ3bmGGU57UXK64g3WFFY6T1L8U1NPHXpbwBsWOVa9V7uWN9o9V
iElRq5CBCUH3xPJpHeJem7k9HpBuuTOufol2FX0GC8cUCeu5hx0RIMNrJh9Ma6op
HNM7IU+i5xa5/BKhMwLsBbnMahy45DHKX/ut/zrf8sGiVLuDUU6IhhlbGdz5nQPB
0GMriUfXnRPpcmi5Y5Sf06Wx9AVrV90m8OLprn3AQaoqPwGCHLp2KYScMcZIX+DD
M6YtAgMBAAGjggIpMIICJTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLrUxEC2S8mU
ZJgq9MxiAgbq+47TMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAG
CCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMDMGA1UdEQQsMCqCDmJsb2cuZGZyZXJlLmZygglkZnJl
cmUuZnKCDXd3dy5kZnJlcmUuZnIwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYG
CysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBv
bmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBp
biBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBh
dCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0B
AQsFAAOCAQEARac2cI+0y5mKTRlRRHwyGmdmZ2cCuAgmbTT446HhIBjNkZSflCKs
JFTVwLGwn0+JnXsBksFn+yN/3qY5kDvy0zE9okCMlklWNpO3KX6GDh+fwluKunhd
H5f5FQd0SWFtSoQJzyKYVo2h2/NcSVrcftxZpGEpz3IcmrallBQRPndbV0JfR1fA
QdSOUUDuiNRP+YrlcQBaH6tRFpRSxK5dIXt9RlUAUKwGZWcBDJ562FRL0CdkF1m/
vTBakmlqIsSSywh88q/Pb6GoS9wPb9Fz5/HvkFiVnni0NvmuOE3nnx1kohjrJQl+
Z1fwVWWNDyCHBfudD56PVi9nYjbkrOZ1dQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322285255737808231343822354317868879343153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-05 23:36:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-03 23:36:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dfrere.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756327642701771099939011695780512612255765456218956305467737838035045331584468560923392382516535015522616539430349560879468704039548423368856753792798588699962106121596097427317101714523817181435201196554495841320970931262121215961579438382303442482043353454915265813272427811523276653404410164023135337616289119829667109014399985140974850786952016593822215417742919074855745067593568682690427609121929417172088427146337750862967341417859706267595706518134066299595460956708284640624175290537651020961701676360062079144190539586579734159297296525269644795992376080961566125748105354343476977876334144963616611136299898281318703600121349672008206359433167592364044621274328439056618563520830023779432586449302666790382216963181335656439369165138327395244347036054001042870296613523911769856327691942190841397135904415514058778515454392445237640682913297864062473040552505172967901991730110247504994873586804396065719932402575937721791028117032440542033358740071660250178165767607831691606832682029116751798426442077899035435629062019587444949834159489180920669113118087579444716821204946448029687639559231440129469531859332319722330002084623353676371319407162253861941302370657802095542849244358835301500897909413421770155744667346477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bad4c440b64bc99464982af4cc620206eafb8ed3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.dfrere.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfrere.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfrere.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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