capital.click-call.com

Issued by R3

About this certificate

This digital certificate with serial number 04:00:8f:7c:10:27:33:35:92:cb:4b:d5:ff:d3:42:af:c2:e5 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=capital.click-call.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:00:8f:7c:10:27:33:35:92:cb:4b:d5:ff:d3:42:af:c2:e5
Serial Number (int): 348639867502872988373214804425387965137637
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:f5:29:63:6b:47:98:a0:9e:98:fe:13:92:63:16:a0:05:c5:44:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:6b:c5:b9:ec:74:4f:82:f1:62:db:19:ba:29:7a:5f:22:89:88:f7
Fingerprint (sha256): a5:b2:9f:c3:a2:d5:e2:cf:a7:cf:df:29:e3:f6:60:2b:85:6e:1b:e0:88:58:79:25:05:df:4f:24:ce:6b:b0:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate capital.click-call.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for capital.click-call.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

capital.click-call.com
defiscalisation.immobilier.capital.fr
immobilier-neuf.lepoint.fr
immobilier.challenges.fr
lp14.click-call.com
planet.applis-immo.com
zest.applis-immo.com

Other certificates including the domain name click-call.com

(limited to 100 certificates)
aval.click-call.com
boursorama.click-call.com
boursorama.click-call.com
landing.click-call.com
redmine.agence-markus.com
darea.click-call.com
capital.click-call.com
landing.click-call.com
aval.click-call.com
gestion-flux.click-call.com
aval.click-call.com
boursorama.click-call.com
aval.click-call.com
aval.click-call.com
aval.click-call.com
aval.click-call.com
aval.click-call.com
boursorama.click-call.com
boursorama.click-call.com
landing.click-call.com
landing.click-call.com
boursorama.click-call.com
capital.click-call.com
gestion-flux.click-call.com
boursorama.click-call.com
landing.click-call.com
boursorama.click-call.com
landing.click-call.com
gestion-flux.click-call.com
landing.click-call.com
boursorama.click-call.com
landing.click-call.com
capital.click-call.com
redmine.agence-markus.com
darea.click-call.com
gestion-flux.click-call.com

Certificate

The complete raw certificate details for capital.click-call.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWe0FB+YMoWtICDBG/is
DPLyU9vhPnz1ZvXCahmnWQnyK/nbMyfLAhVUhD0TIEUaqAEXZk+H7aU389bYqMC5
WK2lRMrSbjgyMPeB7qtF/O2uYMR+xTGF5VkPgTjSRNhi0NWuC/PAw8JPsOFsCSuh
Jj5/N33O+NGZtxvif8V+eeoJAUpMpmEb2elosR44vS+GW9EPO+F2ZSsmZ/Tze0WQ
/nSkkazsnCVmeRth55Fy0sMFKPMJUAixNhAeF9bc6pYN962b9M8JFvCEx7KvLvOl
+NHr+r8eU13eNFHVehsvM94yybcA90dSJG1wBY37TXvoWIX+IlfLQOSaPyvNtgi+
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348639867502872988373214804425387965137637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 08:02:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 08:02:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capital.click-call.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23405224487011025258654732574289540412365372426716104166053753221615685645015828962082242463253439448088101028796786865573965316120803338866033430619153183589701193599097191284647501573560762586494124756323678921425977093742686037162202198151620361614396987774140637317161646990393396640088841591711230059928551841326720164875059474255834055045198663272181019250158450687022425102037978161342132873580456998413203627841921046177412671854653280270978402261903625605184039925512935296746390609307869076740718008602285480256529385654602950479367807404480239915819462363590919255989788942524419209562938240326237180968521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcf529636b4798a09e98fe13926316a005c544eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capital.click-call.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defiscalisation.immobilier.capital.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier-neuf.lepoint.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.challenges.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp14.click-call.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planet.applis-immo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zest.applis-immo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018586517c720000040300473045022052d17b0bb61480dd82eda2edab3281fff2c3c247431f1877d592cd7ea3bbe3d7022100851d8f30521f590df704c002472e58f337dd5e0c92d6a6b9c9f89c2a3f7eaca1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018586517c6b000004030047304502210093c4993ef3083e6051daa8882c3d5f8aa8ab6ef9ffd2eb0d8afee41f841802e502205a5ab6061f4d914883a4331c47f6733618ac23d5fe77dfa553910ffa33170dbb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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