saint-germain-entreprises.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:35:a9:a5:2c:80:27:54:58:a6:63:d2:e8:2b:8c:35:20:9a was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=saint-germain-entreprises.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:a9:a5:2c:80:27:54:58:a6:63:d2:e8:2b:8c:35:20:9a
Serial Number (int): 279597320404939186778798820654340187168922
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:8e:27:83:c8:d2:c1:68:13:46:55:08:c1:5a:28:43:bf:03:e1:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:ec:a4:02:3f:bb:65:9e:38:d3:e9:be:6d:58:42:21:df:1c:07:fd
Fingerprint (sha256): af:d9:e5:2d:95:7a:26:82:83:1c:c5:fc:15:5d:7f:79:1a:e7:4f:a1:7b:09:dc:5e:a3:aa:6d:13:70:4e:2c:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate saint-germain-entreprises.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saint-germain-entreprises.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cd-fermeture.fr
celp.fr
saint-germain-entreprises.com
www.cd-fermeture.fr
www.celp.fr
www.saint-germain-entreprises.com

Other certificates including the domain name saint-germain-entreprises.com

(limited to 100 certificates)
celp.fr
saint-germain-entreprises.com
celp.fr
saint-germain-entreprises.com
celp.fr
saint-germain-entreprises.com
celp.fr
celp.fr
saint-germain-entreprises.com
saint-germain-entreprises.com

Certificate

The complete raw certificate details for saint-germain-entreprises.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279597320404939186778798820654340187168922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-25 07:28:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-23 07:28:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saint-germain-entreprises.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690960233628057595991472912745989899810755846277985754515515673553784097864565935664294961135627320985943505042606266870674934379889096989709026602721009001844883747117446421221546685235299089565341403695093796712386631154130501866580162534921982488053309239720572933933232657750593820592497309562322914451305634060845658198014751585206347642570185217755152524880519926887134159192646520333917169408788937476951886725891664298860797574267214954307283468873458789947034668472517172222795945039256272753433770135351898031081013789235992128662360568850355730664601213780007597740876640554570781462571540698292033233715292198860647707918943387993405456795405729418870217557363098221882503061891240935410336561329009676420156700676136517223780639617667736353552341077804254375319826180082583728060413471661338851462563022007732758153377535069565262978118894516439369637754543971195794501602024319704335982986462693128827780081894720335441733953121320499802234471471615684686522597853410416076097969078304985122414869240604925145393831223022057689650727937388429282010016293327975033458533841503476759000063265016177067867684994881321129388164012883512040655047094453390199351753647866090080398280260698474287446751941618898667875534873327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa8e2783c8d2c16813465508c15a2843bf03e19f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cd-fermeture.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-germain-entreprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cd-fermeture.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-germain-entreprises.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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