shemenwood.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:3f:70:f0:72:8c:56:ac:55:9a:83:25:ac:4c:e9:e5:53 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shemenwood.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:3f:70:f0:72:8c:56:ac:55:9a:83:25:ac:4c:e9:e5:53
Serial Number (int): 324033141086569770903668615020134718367059
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:77:d8:56:4a:64:be:fd:cb:35:4c:b3:ea:2c:0d:42:aa:10:0b:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:25:9b:45:f0:e7:4f:dd:31:30:a6:2c:3b:4b:79:f9:5c:ba:43:96
Fingerprint (sha256): a0:00:04:6d:ee:c5:c3:38:3c:a4:3b:d8:75:1b:2b:2f:96:b3:36:46:bb:ad:81:20:c0:90:d2:48:67:8e:8b:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shemenwood.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shemenwood.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shemenwood.fr
www.shemenwood.fr

Other certificates including the domain name shemenwood.fr

(limited to 100 certificates)
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr
shemenwood.fr

Certificate

The complete raw certificate details for shemenwood.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0pSpImY5vEuA4vqF5G6b
36hYcoM3RAVHMCUA2BomznDK2IhF0vUsmNqPL3ed7wWfA86un/o9NluZRy5HVv5g
N9NinxWz66Ee6i3hgXajQe5iOuyNDsbbSCKtNXMLEpZ64sRQFtdKGS+G6R7/6U3I
xGCpeFOYwsqPyj/6jFIzHd6ph09u8oftZFgzOavr7oWR4FlHycE3+MNc7dTukV0C
7Nwa8guahf5ENB61CGNGHzWITHLp6kfTZHM9DBHn4oDX571kcZFk/RQdNfBd4paB
lb5kpNBOShNBrk+go0tTO9xxkMscU7bfS70xNTFA/9B/A0UdZ6GegHMZJgpUv1iV
wMEjKwErYYRilA0wT+/FMSCxo99NxTA8FpRx8bYu8PV7rR0AGa2QMnxcyWZGZQjC
geYHBDdjkeR9Xq0hSm9T/AJymGF6059Oe0lv6UbBX2MQQuoVGb5Td4736ha0jibB
VMETyuwrG2VT0Wh/n5wrKb3Gi7XcZZ7y30jTIcyteZVniA4gyPJZGT50BMjC31en
szQUIpt9sLLnxnmTkti9uGPVbpASSSMw1JohfJ5Gn+qFY7bby16Qdb5ia5zDN/8T
1fx8ZfHTRcWO/4yxq/DtiM9HUEOSOvqBrQ2SMrEb53onbzyVbsDSFbR9SQx9nT5N
6sijnyYfQIcBOveOpkpVQ0ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324033141086569770903668615020134718367059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 09:17:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 09:17:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shemenwood.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859094327198166374252292291141193851046874228472573958354825283811071085263215679175911284705621089602423985957292966116193740402976390413432286515361098575313569611531683364821319120124923448645016876708699861353457821676405896676948991973248783777222250321960954951635400682516862906345970115130551475655892581168104064992187554918550449760394994519756899057380285401015267604789899518314810957746253715771112633948130312547392891534783512326219029906793004868002228393746637855021447381563127664871479132228526672006247205245971431076972213862546188226141641128229679586353080799903279127973791415673409854358219478714279811540722806569024459485912136686407072455069513289897594215183891223854425747634070814914943139695928371729279948722086480587602995065455494615991420465735538053250447089732965356650479934405094653752261576516819780904210190494592219055288764236122499355571107293942548214581967517662083745920670011590246873375143486860296609373985700440632415492196453709076613013354627180602873400150745909197233247072692941963359244768592725482613307532999684327959725043809635884121664794504518612080470201502426283473266684547827339066831526584006515682360617224507826148825591030579625585438733010672481938843001766721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f77d8564a64befdcb354cb3ea2c0d42aa100b34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shemenwood.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shemenwood.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016513e3cf0400000403004730450221009b131882a739fe85fbe1d2bbe488b3a14d7310b98ba3ddb97974f21a7fd282690220192c1c54b4ffa73beed0f0162ac7c34efa89e885046a437dbca70bfd4228a51d0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016513e3cfe80000040300483046022100924f668821f0326989d5bc9c121db73c2a2c84277df5b7fef01085bdfb273d33022100d134d65ee0b20a4f49e61f03679ada48e917cc3f5e53da527b67cfd7432c4443
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005b4761b0522644a4758a040cd225f3632f1456a36803ed4958f943b2dc23fc772968fba3cd6e29d08bb98566eefe7e701567135c61864ff8dc7bc0ce0e90674f46f8f69ca880a3e74ba90e2ba772be3d9b754732278cd572fa45d36fa832ea04f7979d7dc94c0893c739f728b391085e9d136f895d937e0d6243a3073bf1dd5f98149052383174694e13d2b842989b637adb3e5504c0771f75282d90e1ba7941594000fb7163812f006468d992d665b810bb3632a54b367aaeff4e6bf8fa7b774051719d0fc1ed948d93ec924e98da49ca4021647d47ee61d52d50b2a1a0b65744981771cc22889bf2766fdc54cee1ac9a18b0bbc424884eda7f96b9cf0d8e73