businesshub.mazars.com

Issued by R3

About this certificate

This digital certificate with serial number 04:91:86:25:45:ff:11:8f:00:75:d1:fc:57:14:a6:5d:7a:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=businesshub.mazars.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:91:86:25:45:ff:11:8f:00:75:d1:fc:57:14:a6:5d:7a:70
Serial Number (int): 397968397016690886521111515080251414510192
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 63:0c:98:16:6b:77:7b:7b:9f:72:e6:ac:61:27:60:30:36:dd:d9:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e4:54:4c:b4:e4:22:49:61:7a:a3:f8:dd:42:bf:0f:8e:56:fe:01:64
Fingerprint (sha256): a6:e8:24:b5:31:f6:53:0e:d4:35:f2:91:e3:8d:5c:45:4f:f2:13:b0:40:f2:f0:26:a3:25:c0:dd:02:36:59:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate businesshub.mazars.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for businesshub.mazars.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

businesshub.mazars.com

Other certificates including the domain name mazars.com

(limited to 100 certificates)
businesshub.mazars.com
www.ecommerce.mazars.com
businesshub.mazars.com
ecommerce.mazars.com
lookingfortalent.mazars.com
university.mazars.com

www.mazars.nl

*.mazars.com
incontrol.mazars.com
ecommerce.mazars.com
moffice-api.dev.innovation.mazars.com
access01.mazars.co.uk
www.mazars.fr
fre.into.mazars.com
www.mazars.fr
*.mazars.com
*.mazars.com
businesshub.mazars.com
mazars.com
*.mazars.com
businesshub.mazars.com
optimize.mazars.com
ecommerce.mazars.com
insidemyphone.com
businesshub.mazars.com
businesshub.mazars.com
*.mazars.com
*.mazars.com
MAZARS
*.mazars.com
www.annualreport.mazars.com
tomorrowsaudithackathon.mazars.com
businesshub.mazars.com
www.ecommerce.mazars.com
mcount-api.dev.innovation.mazars.com
www.mazars.fr
bim.dev.innovation.mazars.com
www.mazars.fr
www.ecommerce.mazars.com
nothing-to-hide.mazars.com
university.mazars.com
www.mazars.fr
university.mazars.com
insidemyphone.com
financialservices.mazars.com
*.mazars.com
blogs.mazars.com
insidemyphone.com
insidemyphone.com
ecommerce.mazars.com
insidemyphone.com
mail.mazars.co.uk
fre.into.mazars.com
access01.mazars.co.uk
www.ecommerce.mazars.com
university.mazars.com
*.mazars.com
moffice.dev.innovation.mazars.com
bim-api.dev.innovation.mazars.com
www.mazars.fr
ecommerce.mazars.com
www.mazars.fr
*.mazars.com
www.mazars.com
insightsforgood.mazars.com
businesshub.mazars.com
businesshub.mazars.com
businesshub.mazars.com
*.mazars.com
veritas.mazars.com
insidemyphone.com
*.mazars.com
lyweb01.mazars.co.uk
net-zero-hero-webapp.dev.innovation.mazars.com
mazars.fr
www.mazars.com
access01.mazars.co.uk
*.mazars.com
insidemyphone.com
*.mazars.com
insidemyphone.com
veritas.mazars.com
*.mazars.com
financialmodelling.mazars.com
access02.mazars.co.uk
*.mazars.com
insidemyphone.com
www.mazars.fr
*.mazars.com
mympp.mazars.com
financialservices.mazars.com
www.mazars.fr
iframes.mazars.com
www.ecommerce.mazars.com
ecommerce.mazars.com
insidemyphone.com
www.mazars.fr
mazars.fr

Certificate

The complete raw certificate details for businesshub.mazars.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTodKyWJgrIaaSd5QYhd
u0LBiaOldkc7rfJGpVt5toFaqvnbS9K6OZBfGpnBy9UbXYfrykj0idp7eFZyXDsz
sVBOC7I6+xRhBiIoi/kxxRifw1mu2jIgupUKUfMcbDVNh/7zyyUEwCvmOmmf8w83
CkDORatFjbQ1BvEem/kqJ6z5hoVjrCr+H8jqot4lrjllSImAm9pw4eloE0WKijxC
nKMuxTg/T2o9nSyXb2DrbkIwSV/fMyEmzWI0XeMTCDlfmRLFzmGRb+6J2qzuVAWi
NBt/5gwL1WmQk/3yfoyrORI+bkGDUq/qwHnh0VKd9lEIcBhAfIBShy5mc66DxwRZ
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397968397016690886521111515080251414510192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-10 17:04:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-09 17:04:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'businesshub.mazars.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22372837030679632608768598434782076723208197059215309001690554070906867741976585969532877202092627371493867375965165812282428197484034569522258851716899890813054337722967058839617676798627579411390835601429195829406489973349832957455269058485372810012115823078607296081751611254787774813442272717087257886024750628800742234844207878523128977791236516931414721652959319905233388848102472432627945070684079603230577236145435350214525848975369241417197390301481978721862010147724711146512323132574509640197025809081741234408718695336645024190116289550595521734217957309313398465729992243168237686311742770687879072209333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							630c98166b777b7b9f72e6ac6127603036ddd93d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshub.mazars.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000018014a61ea30000040300473045022100e2b2b3c90c6fa38adb367a1af94c633a63c49d32711ccef890af9489f226b77e02202b07b972e99b658ef0d5f3f043d4b4639e9c0e91b9d1e4bad4a6800222a2a0330076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000018014a61eca0000040300473045022100fa25684bf441ecd5214355a4e75dd961781a666edb7919df6c52607293a3a60002204440a92fca7900707cdbe133a978c9924ba8ec290926f839335cd7acbb7a839f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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