*.moocit.fr

Issued by Gandi RSA Domain Validation Secure Server CA 3

About this certificate

This digital certificate with serial number 59:c6:09:ea:c7:69:b9:19:b7:d1:cb:c7:d0:a6:b3:69 was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.moocit.fr

Gandi

Organization: Gandi
Country: FR

This certificate will expire on

Certificate Details

Serial Number (hex): 59:c6:09:ea:c7:69:b9:19:b7:d1:cb:c7:d0:a6:b3:69
Serial Number (int): 119329567545639198039497408557493957481
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f2:31:ce:d7:10:71:d1:2d:5f:bb:b7:f0:6b:2e:84:34:50:be:59:bf
AuthorityKeyId: 81:11:92:de:66:32:a5:b0:5b:33:3d:65:43:85:fc:d4:04:2d:f1:ae

Fingerprint (sha1): 41:fa:3a:3e:de:44:06:9e:49:d8:fb:65:ae:9f:09:3a:df:b1:0f:e3
Fingerprint (sha256): b1:70:1d:98:d7:13:75:c4:df:7d:54:63:6e:df:85:ca:48:da:57:fe:bf:28:49:8b:93:c9:8c:63:90:9e:24:3d

Issuing Certificate URL: http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.moocit.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.moocit.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.moocit.fr
moocit.fr

Other certificates including the domain name moocit.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.moocit.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/UIVDKxXGd44yg+Rz2c
7+sWwi54Vg95H6ek4K1ZnZ5sCo5w+UUioR8/auD7dtiJep3578BLEUiQCcxm47E3
vIKWPBUWFQ0TJuuDd9bfN37jbSH59C8KOB+EeXx183wHKLYdODLorlm+IIDeLBIj
WLxzASYwn6mPjl+b7LTxGaXHXIX+5PkmRbn9KAlFWbDUE5kdTlNV3wm4jgXIkguu
2rYQJDWizCDj2rA+1dzKDrF6iFKJuk8004a0k4PX66bOaAMaMGtixNQnJ+TP2viR
a4ahjmJQA+m5QeMHi2fGw/3C2lDKrPGcAQIFuUKpM3XkC/YH9Cu6GwTgZy/H48n5
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 119329567545639198039497408557493957481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi RSA Domain Validation Secure Server CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.moocit.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26252159174261693685107035802252976529366023784390644006625303150957689634058710800836983540358936540712469400191050816814228571455365648993097630127354162630037237985945193536548396750848676323432942038253576469590032327589299192418872843952968954894974685991573281264504957942807715126247672817644551287538192441956199250660757478548758157346698075182517482535647570781716157766878098511197431984542464938722597629451239671928841309668276360331986360995248072268291371523725010531560812937065042820861088206641440805239758431955876361717951218317768281279607326257219325519091084436089192157048648725985865945970947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 811192de6632a5b05b333d654385fcd4042df1ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f231ced71071d12d5fbbb7f06b2e843450be59bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moocit.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moocit.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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