certifications-securite.mazars.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:23:7b:55:c8:60:62:e7:90:a5:72:bc:e5:9d:2c:2e:e4:99 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=certifications-securite.mazars.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:23:7b:55:c8:60:62:e7:90:a5:72:bc:e5:9d:2c:2e:e4:99
Serial Number (int): 360522967022106786728032340666220010202265
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:2e:2f:68:43:1a:7f:de:1d:4c:91:60:2f:b5:3b:d6:28:ee:72:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:4e:69:00:2f:15:c8:6a:37:86:ce:de:8e:36:63:08:8e:7d:17:55
Fingerprint (sha256): a2:e3:fb:91:55:47:d8:a1:b2:18:d1:69:dd:59:45:9a:50:c3:41:b5:be:ab:13:f3:00:57:ea:2b:d5:fa:0a:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate certifications-securite.mazars.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for certifications-securite.mazars.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

certifications-securite.mazars.fr

Other certificates including the domain name mazars.fr

(limited to 100 certificates)
loic-michoulier.fr
mazarsmedia.fr
mazars.fr
loic-michoulier.fr
actualites.mazars.fr
gestionactifs.mazars.fr
alumni.mazars.fr
mazarsmedia.fr
mazarsmedia.fr
mazarsmedia.fr
vytalbackup1.mazars.fr
*.eazy-dataviz.mazars.fr


franceintranet.mazars.fr
*.mazars.fr
actualites.mazars.fr
mazarsmedia.fr
mazarsmedia.fr
mazarsmedia.fr
actualites.mazars.fr
mazarsmedia.fr
vytalbackup1.mazars.fr
www.mazars.fr
teams.mazars.fr
online.mazars.fr
actualites.mazars.fr
www.mazars.fr
*.mazars.fr
*.eazy-dataviz-pdd-partner.mazars.fr
erp.eazy.mazars.fr
mazarsmedia.fr
mazarsmedia.fr
mazarsmedia.fr
certifications-securite.mazars.fr
mazarsmedia.fr
certifications-securite.mazars.fr
certifications-securite.mazars.fr
online.mazars.fr
online.mazars.fr
MAZARS
online.mazars.fr
erp.eazy.mazars.fr
certifications-securite.mazars.fr
wifi.mazars.fr
mazarsmedia.fr
online.mazars.fr
frenchbusinesshub.mazars.fr
online.mazars.fr
online.mazars.fr
actualites.mazars.fr
www.mazars.fr
loic-michoulier.fr
franceintranet.mazars.fr
*.mazars.fr
www.mazars.fr
support.eazy.mazars.fr
*.mazars.fr
www.mazars.fr
mazarsmedia.fr
mazarsmedia.fr
actualites.mazars.fr
erp.eazy.mazars.fr
mazarsmedia.fr
*.eazy-dataviz-ppd.mazars.fr
*.mazars.fr
actualites.mazars.fr
www.mazars.fr
loic-michoulier.fr
www.mazars.fr
online.mazars.fr
*.mazars.fr
online.mazars.fr
frenchbusinesshub.mazars.fr
*.mazars.fr
www.mazars.com
online.mazars.fr
actualites.mazars.fr
certifications-securite.mazars.fr
*.mazars.fr
mazarsmedia.fr
teams.mazars.fr
*.mazars.fr
actualites.mazars.fr
micollab.mazars.fr
certifications-securite.mazars.fr
erp-api.eazy.mazars.fr
certifications-securite.mazars.fr
mazarsmedia.fr
frenchbusinesshub.mazars.fr
mazars.fr
mazarsmedia.fr
www.mazars.com
*.mazars.fr
wifi.mazars.fr
*.mazars.fr
online.mazars.fr
finexp.mazars.fr
mazarsmedia.fr
www.mazars.fr

Certificate

The complete raw certificate details for certifications-securite.mazars.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360522967022106786728032340666220010202265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-30 12:26:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-28 12:26:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certifications-securite.mazars.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849166378555191408873599224708480966353849264005087016415689736106523361407253460936573669307967361940063872424501571521560498340372724839137720691644016227479095687836794408649683937564320951256728840855964648996212007457688528780108390899005784365376791053704869507999315564117807148240218181299490184428934319402731135939975013473791266451211559906449660529597367548359805275946913233568249085323135923735621394474754848458854218252513505636435971168679924542936408555337724619395403697468148623700510714525502616809129647274714674449638526190688747343610523476838756245285954150939861653580639197272924413421952804316063073735334260567283586287851066941468857366766495083045716086965078258002486345354715990282912084131010758373492503000168437062794290892101185827124975731213443189966748655320282218136565030403776095308737866477621313066178154624413982362489130614554222317165689449868594490469612313171265754515203382549888527427250050616301593209141530900733385620242900808514581740678646150662027308685176827131017434584792729525136431544573925721206332882260800630062696063800904122454479667784841827500972020439254328880768985126650875800182991141118871626515165164788248051888414877933339912619680514745174019460632834859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d12e2f68431a7fde1d4c91602fb53bd628ee725e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifications-securite.mazars.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017579afe7c80000040300483046022100cd0acf19a286ccee843779ee0c149cd43faca99e1a1b5bce3023a5b594675e1e022100ae406750604f765405a0c8501b0caec6e335784e833e38f14f9ab2b76d288d69007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017579afe7a50000040300483046022100ffbd253bf31dd156b8be0eb03a1e2030ba25e07ac420c1107d6d1c1cf8696d8f022100f0a8a3982ef5675f7df472a8a3856df4f28cbcd6abcf837c249aa18cc48778f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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