www.conseil-cie.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:51:bc:2d:9b:58:88:ec:70:0d:25:c0:c5:2d:f8:be:6f:1d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.conseil-cie.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:bc:2d:9b:58:88:ec:70:0d:25:c0:c5:2d:f8:be:6f:1d
Serial Number (int): 289149861183230896395995124856461006368541
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:e8:ba:c2:da:43:59:c9:25:7d:79:a7:50:d4:b1:d0:89:1a:fe:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:52:c5:c7:2e:91:82:4d:5a:83:c3:91:41:cb:26:5d:be:56:b5:03
Fingerprint (sha256): 9b:57:0c:45:76:f6:36:d9:0c:f4:ea:e7:a9:3a:cf:59:94:11:33:06:37:8b:82:84:c8:99:8d:61:06:93:53:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.conseil-cie.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.conseil-cie.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conseil-cie.fr
www.conseil-cie.fr

Other certificates including the domain name conseil-cie.fr

(limited to 100 certificates)
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
www.conseil-cie.fr
conseil-cie.fr
www.conseil-cie.fr
conseil-cie.fr
conseil-cie.fr
conseil-cie.fr

Certificate

The complete raw certificate details for www.conseil-cie.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289149861183230896395995124856461006368541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-31 08:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-29 08:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.conseil-cie.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806819323828571861950318335560830818566132919033937776013490086396199904928748446020982968745594077796083612959806138003450851032581610514184813870394731478986855628005575886012082051542580507533340266838282666626999740927989300274985084621883717744063354652045650502924509231358889816168156509787416247028819667946617719677239850473365762109053485311284728475815759619474110977335408309446167152947054260686090519270668307924219451081753891679079599381988428585552885054202711433464965535185830326068951009136645952371997800871457309390347793053116148373110132641598933382916133221593945491571105686267874409993837126619286179408648955862106367797954652124269998142795833244510290886702186671942263140081213904701978272991692572477186701321035735970703459429156351988116339561087939644542820048318910823350805861263890652243143672085048244243116023330749815471921672762178684265950058588705611058774018600192675319860774097955470968985630316478698800230796262679703771154451248651379244159511509566244912842879546005540490755378662037627867331607369437653572505650478856169289159594578736117042822139374215466509824360005727651798737382974903364095529846611310934518335694299630771966478306112850262034345512152308298028226930388457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2e8bac2da4359c9257d79a750d4b1d0891afe15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conseil-cie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conseil-cie.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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