taf.ncitl.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:cb:5c:45:ad:3e:cf:8d:d8:86:40:96:0b:7b:5a:47:d4:de was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=taf.ncitl.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cb:5c:45:ad:3e:cf:8d:d8:86:40:96:0b:7b:5a:47:d4:deSerial Number (int): 330536829038159941572054896961263105463518
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3e:78:db:a6:c9:80:a0:e6:28:4e:78:c5:69:00:6e:41:8f:4a:f8:da
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4a:38:7c:ed:91:ba:c6:86:d8:30:e0:fa:82:77:c2:43:0c:6b:c2:23
Fingerprint (sha256): ab:ff:61:36:de:0b:c7:7b:1d:c9:51:f2:c2:9c:b2:45:2a:2b:3b:ca:f9:37:0c:8c:e6:5a:4b:db:d9:4d:a5:7a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate taf.ncitl.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for taf.ncitl.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
taf.ncitl.com
Other certificates including the domain name ncitl.com
(limited to 100 certificates)
taf.ncitl.com
ftp.ncitl.com
taf.ncitl.com
psion.ncitl.com
taf.ncitl.com
edi.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
mail.nci.fr
taf.ncitl.com
mail.nci.fr
chargeur.nci.fr
taf.ncitl.com
chargeur.nci.fr
taf.ncitl.com
rt.ncitl.com
mail.nci.fr
rt.ncitl.com
taf.ncitl.com
taf.ncitl.com
psion.ncitl.com
mail.nci.fr
mail.nci.fr
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
edi.ncitl.com
rt.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
mail.nci.fr
taf.ncitl.com
taf.ncitl.com
mail.nci.fr
chargeur.nci.fr
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
ftp.ncitl.com
taf.ncitl.com
psion.ncitl.com
taf.ncitl.com
edi.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
mail.nci.fr
taf.ncitl.com
mail.nci.fr
chargeur.nci.fr
taf.ncitl.com
chargeur.nci.fr
taf.ncitl.com
rt.ncitl.com
mail.nci.fr
rt.ncitl.com
taf.ncitl.com
taf.ncitl.com
psion.ncitl.com
mail.nci.fr
mail.nci.fr
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
edi.ncitl.com
rt.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
mail.nci.fr
taf.ncitl.com
taf.ncitl.com
mail.nci.fr
chargeur.nci.fr
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
taf.ncitl.com
Certificate
The complete raw certificate details for taf.ncitl.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISA8tcRa0+z43YhkCWC3taR9TeMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDYxNzE3NTVaFw0x OTA3MDUxNzE3NTVaMBgxFjAUBgNVBAMTDXRhZi5uY2l0bC5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZtoCXbfMNCAB/jOjpeLVah5AQo1HdZr/J pr4bn/hkZ+w6xPWALCJ2xT/MftgA0yY6fuQRpqq1uha9fOLcf04npQinKFaIE5GZ S4MWLRJAMxGIBZfbA7OnnduRRxrEn//Ll19iWQstAFmYk8QfSER9VTCSB4zIYTuB ZaUMXBNfQU3Ag/joCZztRTZsmYSlM8D5o9GyKCtiTQ351/4JSpxsh3naUn7Igczd 186i78qJwn1p3oj3WFTWXY5zjYvCLwtzDgRmu9gyDsEz7GTWrjDcamr97c/VmRqJ akef1WKKtyky5zefhg/lpCggST2n9XMkvkGpzBYRALnasQtsl2gnAgMBAAGjggJh MIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFD5426bJgKDmKE54xWkAbkGPSvja MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wGAYDVR0RBBEwD4INdGFmLm5jaXRsLmNvbTBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AHR+2oMxrTMQkSGc ziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABafPfDUAAAAQDAEcwRQIgFg8XMbmU9cxY 72yAES9cUdXwK/GVPaih+5c7jfgNuu4CIQD2bssZ/mPob8/6niun/hL0PmYY6nW8 zlLDHORgDj9leAB1AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAAB afPfDZoAAAQDAEYwRAIgCKQEDgvGFH7XoF6Jc7frcltoa7D8pFmJII/M6HT3WOwC IDNcFDa+94U76OiRXuYUtR+mTHnmdNLNYJI4Opv64YqAMA0GCSqGSIb3DQEBCwUA A4IBAQBuknorwnonwcMjEf7aBXY7PdWsgvwkpoj3RlngXmwi3p2gytAhaqRyS3j+ TN7ppKPB6RhAZmr9hTomHftB+pN5oD5OrJjsrYxzFDl68wYbNFpwv2MwdsjSPf7B tWQixy58riFvQZY7qq6ScXaD8+7WKa42W9MOlFCvouzt3L5nXIoFZGaHnZs9yxh1 X5fHpMiUfdFW3hWNypHljdhoXgt1vpHXF7GcZqfhHTyE6tR7qoYRBgNnU/cleCCv +hrHUiW66bOFGWxnTeOLomCVtu+Fm0M2GpDfFQCdXmLsM9vW6GJNTg6/R97eh7Mc Eg8Mlr9zNREcVRRkgBvEGPIICVoz -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbaAl23zDQgAf4zo6Xi1 WoeQEKNR3Wa/yaa+G5/4ZGfsOsT1gCwidsU/zH7YANMmOn7kEaaqtboWvXzi3H9O J6UIpyhWiBORmUuDFi0SQDMRiAWX2wOzp53bkUcaxJ//y5dfYlkLLQBZmJPEH0hE fVUwkgeMyGE7gWWlDFwTX0FNwIP46Amc7UU2bJmEpTPA+aPRsigrYk0N+df+CUqc bId52lJ+yIHM3dfOou/KicJ9ad6I91hU1l2Oc42Lwi8Lcw4EZrvYMg7BM+xk1q4w 3Gpq/e3P1ZkaiWpHn9ViircpMuc3n4YP5aQoIEk9p/VzJL5BqcwWEQC52rELbJdo JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330536829038159941572054896961263105463518 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 17:17:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 17:17:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'taf.ncitl.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19404455903347600661394276636342100071729183034604168394128332965658313527895213286659595846014988052907794420410860102132486513834149672578317183403705958802748353644999042268093849804858938847724146586076709172523523763947135381497779696726000846101115396143885099393212246883000976357250346559903185163675979469376337256555964944420611843435054884094825317508078846841351563496134675377344452841409190213379594592925369206041493514291297812364779543809834946601044095979019958276870544977604548702504757912241138933017494222404392338961360230492482046737285716771187007589414996974051189628927243972823859647178791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3e78dba6c980a0e6284e78c569006e418f4af8da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taf.ncitl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169f3df0d4000000403004730450220160f1731b994f5cc58ef6c80112f5c51d5f02bf1953da8a1fb973b8df80dbaee022100f66ecb19fe63e86fcffa9e2ba7fe12f43e6618ea75bcce52c31ce4600e3f657800750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169f3df0d9a0000040300463044022008a4040e0bc6147ed7a05e8973b7eb725b686bb0fca45989208fcce874f758ec0220335c1436bef7853be8e8915ee614b51fa64c79e674d2cd6092383a9bfae18a80 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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