support.btib.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:22:df:26:59:53:aa:cc:50:e0:56:52:fb:1f:44:76:05 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.btib.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:22:df:26:59:53:aa:cc:50:e0:56:52:fb:1f:44:76:05
Serial Number (int): 288265517193899784100310359749378835772933
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:cf:b2:6e:29:0c:32:52:1c:5b:df:b0:b3:0d:a9:d3:79:9b:f2:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:39:c7:59:12:ea:27:4e:38:f6:1c:0a:75:01:de:4a:6b:a6:39:5c
Fingerprint (sha256): a5:74:33:d7:2f:71:06:07:fc:79:90:42:5c:59:a6:35:71:8c:c1:28:0b:22:71:67:57:41:40:d8:a5:ae:3a:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate support.btib.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.btib.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.btib.fr

Other certificates including the domain name btib.fr

(limited to 100 certificates)
www.active.btib.fr
www.btib.fr
joindialogue.com
app.relatosmagicosancestrales.com.co
btib.fr
funeral-dev.stsaens.com
www.active.btib.fr
ang-labs.com
btib.fr
gifswipe.sean.tech
www.highnoonpickem.com
btib.fr
www.btib.fr
app.jlmoraiscontabil.com.br
btib.fr
btib.fr
idl.mobileforst.com
bim.btib.fr
www.btib.fr
tekaku.yuta.run
www.active.btib.fr
www.btib.fr
active.btib.fr
egedogan.com.tr
www.pcr.me
www.active.btib.fr
support.btib.fr
www.asetelsos.com
clarity.flavorstack.dev
www.active.btib.fr
support.btib.fr
bonvoyaget.com
www.active.btib.fr
active.btib.fr
www.active.btib.fr
support.btib.fr
www.antoineponsard.com
orurentals.com
www.btib.fr
btib.fr
btib.fr
www.hireglyph.com
support.btib.fr
app.simonxu.com
www.active.btib.fr
support.btib.fr
btib.fr
heir.company
support.btib.fr
office.btib.fr
btib.fr
lyricalgoblin.com
one.sky-boy.com
xana.btib.fr
btib.fr
trust.miracl.com
travelmaxhub.com
www.suomhosty.fi
conectate.gt
intelligere.co
rebelsin.space
app.relatosmagicosancestrales.com.co
v2.alanho.work
active.btib.fr
spotitracks.com
active.btib.fr
imes.ga
support.btib.fr
active.btib.fr
snbaksi.com
tekaku.yuta.run
support.btib.fr
www.proxyponto.com.br
www.anastasiapahos.com
pwa5.napps.dev
www.auguritigre.it
www.active.btib.fr
active.btib.fr
www.peoplevoice.xyz
ashrafthamir.com
link.ekleel.net
btib.fr
www.cinqtortues.ca
elnk.cf
alphaapps.io
www.btib.fr
expert-staging.smartplanthome.com
www.cinqtortues.ca
fynmo.com
www.active.btib.fr
www.active-bootcamp.btib.fr
www.active.btib.fr
support.btib.fr
support.btib.fr
www.antorse.com
developer.wec360.com
cisssgaspesie.passerelle.staging.spaq.app
www.glib.ai
svippr.no
www.yabalak.fi

Certificate

The complete raw certificate details for support.btib.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288265517193899784100310359749378835772933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 23:41:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 23:41:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.btib.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 628345784863370179310921519521544672375885476049219659419939476422636565126862688768423385191568876532225820514124755448405437113939263709614195305578556326113815073517132472401339575308135755894646130529505544069715848166765891042427675255292580615649607389975128455040207451407416628518633491193641570361651716874679290549146211533414079338564176018196029414672073142271358552637556459755427816047976510670286791985277817878103468623162133449539856640880704012213247791953627136601187029211282350308240049029944652352183232983236778868254317563777984140957916642931990645595934933274996797848894738871928118198128392049370047218177204275381844246953327045760483808882433405151511515540901141408849395163620098308601019548821302593463686592844606633527062762184328478989031578573596438980998210577477197583759307931210909274954020831788801792332609588763329865965869476840772123988115030554657416817403484564099626192110232136018925552887020052367701621048030715463538558455434380767407805500053604268229437942089521717170879386589590749200253733261538634482689822681323336837363452596422907355669174642442060921540378333157686290002839723514169163771441461582675848466735147527724857911242243226846087057260921581711659327252680207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ccfb26e290c32521c5bdfb0b30da9d3799bf2b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.btib.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170f03cde1e00000403004830460221009412bfcd6eec80eba3743fe9a1092f25b51c06d14f61b4543615be2d527cb441022100aac033cd26183c8608ad2f490d30dd8f68c26497558e74f2bc9078cad7649667007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170f03cde110000040300483046022100b740a91475116674304161a663565c5a296fa1044b4daabf0768710ae318f17e0221009374d92f4db3888a28bdaceeda047c37e21057112679054ea20b0fb92b9aac70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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