www.daitauha.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7c:3c:59:14:47:45:16:3d:fc:4e:2e:f3:84:ed:be:f0:89 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.daitauha.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7c:3c:59:14:47:45:16:3d:fc:4e:2e:f3:84:ed:be:f0:89
Serial Number (int): 303612087498939386927673766916157167562889
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:a4:39:1d:c5:0f:94:35:0f:05:f6:58:2e:84:e8:b8:04:4e:e8:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:6a:8c:02:bd:b6:ab:68:3b:b5:55:9a:89:26:5f:24:de:45:c3:59
Fingerprint (sha256): b0:33:ba:ba:94:da:a9:d9:2d:18:23:3f:02:8e:43:a4:a6:be:cc:9d:70:94:dc:a8:99:17:75:20:29:1e:2a:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.daitauha.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.daitauha.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daitauha.fr
mathieu.daitauha.fr
www.daitauha.fr

Other certificates including the domain name daitauha.fr

(limited to 100 certificates)
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
xmpp.toniob.net
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
xmpp.toniob.net
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
daitauha.fr
www.daitauha.fr
daitauha.fr
daitauha.fr

Certificate

The complete raw certificate details for www.daitauha.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303612087498939386927673766916157167562889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-16 21:58:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-15 21:58:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.daitauha.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758274908844452713797393782672147110366969771708107718374363331758325653539863764207395285707847370081964097909596483682562371598129327198141329373277363169327767188020517876139397332835418631424867802516974673517877106384111439090354859226268635096849681906804990388462473401190303513779072583524568915356298518255463841995859810735490169395242476119591149555942522835307460124359560411810880880248273395830633395289103071226477657409512388142506024620431122323501399378180441761195882596764907438768036332069264406324321499835582008782455647610486942106545349946703895064371436748558940395631258114877832941580121063566578393861045836331654032841617484937790239377401189233950361260077978047017868538664691438987583969778991131776983391381656448769210993458961049234783331215715182417331873443047682569358442553676804715707082272427660197789140059249710078156013247058048600321418160535647779914175945242287192365636061997750788562457978231731206007230742064244457528887929708867589776173781792963385035791135348584427977687723031851646321417346243810320193239562402594078703540972854079032952665881252047634091591235698079279177981291989659627315285961152475299283229174302031961385824233701411023735927398206154643886704975272929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53a4391dc50f94350f05f6582e84e8b8044ee80b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daitauha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathieu.daitauha.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daitauha.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165e49b2b8600000403004730450220403b13458e2165e27e5424d5ddca202a41f50d6c39805f4aeacae62f6f9177b2022100fb5326a36c20cf944cfe71e34d7e0f0c3eee97152f9865c6019931f98f0f32dc007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165e49b2b4e0000040300463044022071a9dd288745cc394624c32d80410a80e2323c1bd9495a271c56ca12b5749f6a02203b037de3c91b218b9d9daaaaa2bb8a7c78c6820e40a8dcaec91ed591fea6e98f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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