fontenaysousbois.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:ee:ac:44:80:2b:8d:bd:f1:e5:c9:7f:53:73:24:b1:ce:03 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fontenaysousbois.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ee:ac:44:80:2b:8d:bd:f1:e5:c9:7f:53:73:24:b1:ce:03Serial Number (int): 429665329945284834060417993248326508727811
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f7:a4:9c:50:e7:bd:f3:ae:0b:96:62:c9:e7:2e:58:6d:62:59:6b:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 96:65:27:f3:16:32:24:a9:5f:cb:2e:84:47:30:42:9d:4d:78:72:9b
Fingerprint (sha256): b2:77:db:52:2a:d3:b9:86:17:70:ec:55:41:e6:c5:29:fc:73:c3:a2:1e:1e:32:b9:fc:22:56:fa:94:65:7e:5b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fontenaysousbois.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fontenaysousbois.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fontenaysousbois.org
Other certificates including the domain name fontenaysousbois.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for fontenaysousbois.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgISBO6sRIArjb3x5cl/U3Mksc4DMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDQwNzM0NDdaFw0y MDAzMDMwNzM0NDdaMB8xHTAbBgNVBAMTFGZvbnRlbmF5c291c2JvaXMub3JnMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuevPftGL0aEY1GXt/J5osE9w guPog6ivdjk888Of9Ozl21ENy4eWGG9fAw0XuNtUWCbkOBrkMUIq6vq4ZoiS/+CD E49YI0FzutpUcFSghDCEdzz8XXo736fwznScJOuvb6BGa/J0Y1mjv3+scBqLNgm9 vfvAAYilVQH98dbprZ+1qUiNfJjxvHhg3qSeaTGqovP+62K5x406g7h/RMSAvoev DJ59C4rD0vsH3B5QGSAkjNtTK+6PMi+kiVT0x9Qm8cap1aV5ZdTYzDF6dbP3zyVF M3kqi3QCR1hDIbB2qq4Mgb5DkEeRG/gCEx8AE3iWeyPU0O0MedE2JZabZFUuTz+b 5thhBNXGrd2XkZnBYd7h/+u25n01u2BEW8piAtooL/s86k7wqHEFHXG2se86B5Gn 7DPpShrGsBoK85gG6ygGXcbndVsvWXFp11p3RiAar7st5jpXb7/+PU7R9czA7jSf IIjTaBJdi9Fapl6p9cBhJ5PS/j8/GoCssKsQ6ryBQKZ3O5L+BL23zVMRKnZzqFmc 0C3WHnraRqFcVKvzBmrHRvJgAybfY0ehcRF4KMewgHTFiResVEk/zgHrj2OPwg5S FEchUSlCHOXFuTFLK9LM+ZW8NSKe6eyDn54Apb7n5f7OGZzKqX8RW1V97PNCBgSj b62n8rKwF5S0g4yfJscCAwEAAaOCAmkwggJlMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU96ScUOe9864LlmLJ5y5YbWJZa7EwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRmb250ZW5heXNv dXNib2lzLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaB cUVYAAABbtAMJcYAAAQDAEcwRQIgAQ43EKPsi/zwRv42GVDJx7za2EgIpjDoh9ot +TAFyvkCIQDwf6iHq4vlb1Q1BdCEXRr0NyHycLTuRQ7znKVGNzaGrAB2ALIeBcyL os2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbtAMJbUAAAQDAEcwRQIgNChR WdLaspng0+jW2ZrQTU1QfBaV3stD+NkMCpioBfoCIQCrCikVE3AY0R5CtCxFnGZO e15vQaTF/88M5EDfOr2/tDANBgkqhkiG9w0BAQsFAAOCAQEAZFIMinLAa3qTHVO/ AyD95RJzJdQ289zqkDGTmoAKJXWfn154NCmxSd2AMlNJtt9gHGtNE45XJDddF4PA 5koP362qVZS/2sjQaigJv/VimY3c/zzwn7NBNYYw2Y09/QkYCW5cJCwzk3GnO8lR fKHDUkfN3km8Hl0UIh7+CIZ3jbSOAB1FMGKXsVjRzQoYiw6Y/2PCzxIh1lCG4whG l1sJQonRtASNngQMuCNy5q6WQq/RFa9s1jqykF/S1cRmhMqzC6Qh9c+yJlxETWfp /l3fR3uO0etAkvSuAZy4JN5yf9RMpZWwHJtQO1rMBI1PVOhRZU1pC74La2W3Wxdv wO+SEQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuevPftGL0aEY1GXt/J5o sE9wguPog6ivdjk888Of9Ozl21ENy4eWGG9fAw0XuNtUWCbkOBrkMUIq6vq4ZoiS /+CDE49YI0FzutpUcFSghDCEdzz8XXo736fwznScJOuvb6BGa/J0Y1mjv3+scBqL Ngm9vfvAAYilVQH98dbprZ+1qUiNfJjxvHhg3qSeaTGqovP+62K5x406g7h/RMSA voevDJ59C4rD0vsH3B5QGSAkjNtTK+6PMi+kiVT0x9Qm8cap1aV5ZdTYzDF6dbP3 zyVFM3kqi3QCR1hDIbB2qq4Mgb5DkEeRG/gCEx8AE3iWeyPU0O0MedE2JZabZFUu Tz+b5thhBNXGrd2XkZnBYd7h/+u25n01u2BEW8piAtooL/s86k7wqHEFHXG2se86 B5Gn7DPpShrGsBoK85gG6ygGXcbndVsvWXFp11p3RiAar7st5jpXb7/+PU7R9czA 7jSfIIjTaBJdi9Fapl6p9cBhJ5PS/j8/GoCssKsQ6ryBQKZ3O5L+BL23zVMRKnZz qFmc0C3WHnraRqFcVKvzBmrHRvJgAybfY0ehcRF4KMewgHTFiResVEk/zgHrj2OP wg5SFEchUSlCHOXFuTFLK9LM+ZW8NSKe6eyDn54Apb7n5f7OGZzKqX8RW1V97PNC BgSjb62n8rKwF5S0g4yfJscCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 429665329945284834060417993248326508727811 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 07:34:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 07:34:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fontenaysousbois.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758492055025867113026211799944255988631569537821527935861808843203870560815260485353456181915856794558244054299083191206751528026596102855115351296130489406551288157178228896239029257198618916564098526657787427883040962168217986388537347140249561688714817154344779726192670303562408824445846936132496429441988187603363516723345237701026756222782872669710813572043067789163160237208303006316647731411339427185436040028823913857933218082758279373173668183077512927476619715029984735975312993293221363975534339534423543783032590972553853452332270041209797459446642295796431986314787594713548018635586008270551500322598435184041764199397448210050871666712019018753490488829885503292365917924662313818116936224530646980802685632623184342022740371430890567626767251130523106317782309171296109519223846333753319336504465568246369682361686983714312837848588456328266580362044826182565917706933926282222703255104575732104838255918933531597707379728826138245717843431377711854047251655649984621194420274063358401196613509090904057371463802440022527410704028668625978643310039042813294713265775535942527063673201395310048247610911341718305387647085373815267967765247280938792129172790197007353858365576690028478399715462399122345463278628447943 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f7a49c50e7bdf3ae0b9662c9e72e586d62596bb1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fontenaysousbois.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ed00c25c600000403004730450220010e3710a3ec8bfcf046fe361950c9c7bcdad84808a630e887da2df93005caf9022100f07fa887ab8be56f543505d0845d1af43721f270b4ee450ef39ca546373686ac007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ed00c25b50000040300473045022034285159d2dab299e0d3e8d6d99ad04d4d507c1695decb43f8d90c0a98a805fa022100ab0a2915137018d11e42b42c459c664e7b5e6f41a4c5ffcf0ce440df3abdbfb4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0064520c8a72c06b7a931d53bf0320fde5127325d436f3dcea9031939a800a25759f9f5e783429b149dd80325349b6df601c6b4d138e5724375d1783c0e64a0fdfadaa5594bfdac8d06a2809bff562998ddcff3cf09fb341358630d98d3dfd0918096e5c242c339371a73bc9517ca1c35247cdde49bc1e5d14221efe0886778db48e001d45306297b158d1cd0a188b0e98ff63c2cf1221d65086e30846975b094289d1b4048d9e040cb82372e6ae9642afd115af6cd63ab2905fd2d5c46684cab30ba421f5cfb2265c444d67e9fe5ddf477b8ed1eb4092f4ae019cb824de727fd44ca595b01c9b503b5acc048d4f54e851654d690bbe0b6b65b75b176fc0ef9211