www.jlconseils.fr

Issued by Trust Provider B.V. DV SSL CA - G2

About this certificate

This digital certificate with serial number 0f:41:3d:b9:ec:cc:5c:d3:bb:67:a4:c3:66:64:ed:99 was issued on by Trust Provider B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.jlconseils.fr

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:41:3d:b9:ec:cc:5c:d3:bb:67:a4:c3:66:64:ed:99
Serial Number (int): 20277171190059911328732091051164364185
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d8:da:ef:d8:e0:ac:71:71:02:de:e6:62:fa:cf:fc:40:3b:fb:a0:52

Fingerprint (sha1): 16:d2:63:e4:3e:a7:8f:95:6d:4e:54:42:80:82:7e:a7:c3:74:e0:f2
Fingerprint (sha256): 99:37:97:ed:fa:0b:2c:e6:38:76:30:76:87:05:00:89:67:43:34:dc:72:f9:28:39:22:fa:9f:17:6b:16:5a:6b

Issuing Certificate URL: http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt

Revocation information

OCSP Server: http://trustprovider-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl

Check the revocation status for certificate www.jlconseils.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jlconseils.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jlconseils.fr
jlconseils.fr

Other certificates including the domain name jlconseils.fr

(limited to 100 certificates)
jlconseils.fr
jlconseils.fr
jlconseils.fr
black-meridian.info
jlconseils.fr
www.jlconseils.fr
jlconseils.fr
jlconseils.fr
jlconseils.fr
www.jlconseils.fr
jlconseils.fr
jlconseils.fr
www.jlconseils.fr
jlconseils.fr
jlconseils.fr
jlconseils.fr
jlconseils.fr
jlconseils.fr
www.jlconseils.fr
jlconseils.fr
www.jlconseils.fr

Certificate

The complete raw certificate details for www.jlconseils.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDodbzYUnmy+z8wXCCUU
9SoLiGZAPdmV0SVivYjR5Ka2AH4m4/iYYokOSxhJIQSDbf5LDnDT9V1ztHn6W8I0
oL2PtCc7l09qzoJFc06kCef5ozE+64pf+ECEFUZAlELM703ZjzFZI4+0n1GoSCo6
R5LcOEX1fmLIeHTQnJLFHayPbjmlLtNhj6iXOisucCMaJ1D86uAxTfpWLrWBBtxA
Vz+c5FRltNwvmpivx4rVID6e5TRe7t5szglawsutQAPAMIZf/kJgytn44mz+SAiI
ZL44MGktBzkB96kXwUrv4M7TlvYmdXaISDJGyBFbLQsEnkZ0mCh5njIa4PA2On30
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20277171190059911328732091051164364185
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.jlconseils.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23761458897450997308696891257400502174883692854939251365720327315002092213924935102772361611748975748670212907122803166385192242745379941929858936889190765380133355036943045022677843038594178012198712182206260604552245681983170992631476009944810680748891997438034742745477455004400092818289422006306068689685676725420125715624944884614837133862221220635392137149046276309687444511154412976439329750485559845970370388110147887743993914752404618810498121167116693601387964110424108631304228398459595918150142431887776121849460175876533173025907465557600126592477577566132224253195179272891583216819420854863278802597063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jlconseils.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlconseils.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8daefd8e0ac717102dee662facffc403bfba052
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-ocsp.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015485074a7b000004030047304502202ac16e28bc56fdf52e48e9acd4ccf2999c29cdfcffbca366fb2125bb3e9b6bd4022100f2d793d14423f2f337340180929f209629a7a772a2bb26b12db43627b95b5405007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015485074ab00000040300483046022100ccd5c9c6ec4129822731fc19ffdae7d2519cd420e16896afecb60c8b401f7f51022100ee00289540115dee5edb2a63052a9a610161d1a89b919cc925a3b6a5dd3d046700750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015485074a9a0000040300463044022046ac296139dd35c29dbbcf4ace370423eb0bdb9405b571aea08b1828d1b44d500220750d0e38b36d73d58b8faac72d2febae38c167ca985a0c90fd69b725702a5f02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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