paca-sport-sante.fr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9f:d8:71:c8:25:33:a6:12:1a:53:ff:25:d4:50:0f:fc:a4 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=paca-sport-sante.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9f:d8:71:c8:25:33:a6:12:1a:53:ff:25:d4:50:0f:fc:a4Serial Number (int): 315729458171773859140654581903302314687652
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 47:3a:0c:b6:a1:9a:66:ec:2d:76:92:0b:0c:01:52:ef:41:37:b5:4b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 02:5e:75:1b:ee:35:01:54:32:c6:8e:7c:c9:f7:0d:ca:f9:bb:5d:43
Fingerprint (sha256): b3:0d:34:cb:ef:e5:a6:90:88:0b:98:3a:ec:08:c4:c2:0c:d3:87:28:e3:41:4a:f8:44:d5:1f:e7:93:d0:16:f9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate paca-sport-sante.fr
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for paca-sport-sante.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
paca-sport-sante.fr
paca.sport.sante.fr
www.paca-sport-sante.fr
paca.sport.sante.fr
www.paca-sport-sante.fr
Other certificates including the domain name paca-sport-sante.fr
(limited to 100 certificates)
Certificate
The complete raw certificate details for paca-sport-sante.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISA5/YccglM6YSGlP/JdRQD/ykMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjcxNDQ4MTBaFw0y MDAzMjYxNDQ4MTBaMB4xHDAaBgNVBAMTE3BhY2Etc3BvcnQtc2FudGUuZnIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDosDDTT+pG1wZTM2+gHg/7Ire8 XfNsdz1Ou4OGqWj3s8weJAaF9YwqfRgkxkVJWX5fiYXIymm9Z5m/5l2Q0Q98qEBp VV9I6FdhhqJ31n7fSj0YCLwK3VgUI2sWkoMkv0JPht9SQiyCg9D8x50BLG4qbHbn 57vWj1xmF/ivAZqy4jKbm/yOgSWGtcnaZZHZB1sdRlDY+yoEPi7LlH/e4SoYt4kT GZb1MPfT0kxn/Vm84/LPVQZz/eHAW8yIxVhwZjQa0O8MUkG7DRo1lTtCkMv+u7bq 0FVnaay/uDhRX9+xqLfIkchcQ2bfxApe5PKrnYLA7/dO4rpBxcMUGAcYxZOjAgMB AAGjggKWMIICkjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEc6DLahmmbsLXaSCwwB Uu9BN7VLMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wTAYDVR0RBEUwQ4ITcGFjYS1zcG9ydC1zYW50ZS5mcoITcGFjYS5z cG9ydC5zYW50ZS5mcoIXd3d3LnBhY2Etc3BvcnQtc2FudGUuZnIwTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwBe p3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW9ICzDZAAAEAwBIMEYC IQDE3K1h+AoJJLEn9n4vXIlVUXEJhu1QScvroQgCgrm1vAIhAPpfk7fLASrtBfgM nOxzDH1VrPAmdf22qiwc/cyOJLjrAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn sklTLe+LkF4AAAFvSAswwQAABAMARjBEAiB/3I0vAtmV+vq8eur12BVw97u7Uro4 5IsRvkdYXptohgIgJ/TahL8RNHXcTHJxnDPYaVbZBUlJ7AsHGU3mDJ6Nwg4wDQYJ KoZIhvcNAQELBQADggEBAFJwbKShzSYPotDEMZZ/BGL3txaJcjze2U0tYadq/3iR NqYG/Nuo/oJYnV2bvtbysAIMaERxt0n9AyXeabk72HrY0YWeG1FpYYJJOxuCMqqD iKP5VZz+cR0QiUjGCnQ/lOeAsoFI3M3Dn7Zh6nUYQv67KE1ZhTd5cazpcSjfx9Wt ZJFpFMdK+SqsRCiIFHudXe9hFkcET8DabK9NFE+A00Q8ZhGsA/p7duN0+X85f2ID 61pso4vA+5gFqFfdRpYju8nQeIcpiRKimVTLZOiNFZE0oyQrY7r8hr+AVNMLBxbl v4s1DLEBdEShgp42ZBrEkTJd0rLqunBVfHEmPdSf/TE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LAw00/qRtcGUzNvoB4P +yK3vF3zbHc9TruDhqlo97PMHiQGhfWMKn0YJMZFSVl+X4mFyMppvWeZv+ZdkNEP fKhAaVVfSOhXYYaid9Z+30o9GAi8Ct1YFCNrFpKDJL9CT4bfUkIsgoPQ/MedASxu Kmx25+e71o9cZhf4rwGasuIym5v8joElhrXJ2mWR2QdbHUZQ2PsqBD4uy5R/3uEq GLeJExmW9TD309JMZ/1ZvOPyz1UGc/3hwFvMiMVYcGY0GtDvDFJBuw0aNZU7QpDL /ru26tBVZ2msv7g4UV/fsai3yJHIXENm38QKXuTyq52CwO/3TuK6QcXDFBgHGMWT owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315729458171773859140654581903302314687652 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 14:48:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 14:48:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paca-sport-sante.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29374169636480810758758026067172907574283336877644152931179190404914453730820907996325590543559107969510602609935029482679657708637756646516968465251647650208207745182782597035088433875703928116629240905301939975697244203421957576016895669930607016491449367392861640937609240742792361736847192549438998616023722393925849614235525707960915437028128264598596711726298633195946417990602824714042638687791996755734106530387114568943932827287396663643609553035629870530056027832375108614397389260767307411315489302978925256101250533961633930596314253337674011751109161655174246616684504063057592552794174208712445102756771 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 473a0cb6a19a66ec2d76920b0c0152ef4137b54b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paca-sport-sante.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paca.sport.sante.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paca-sport-sante.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f480b30d90000040300483046022100c4dcad61f80a0924b127f67e2f5c895551710986ed5049cbeba1080282b9b5bc022100fa5f93b7cb012aed05f80c9cec730c7d55acf02675fdb6aa2c1cfdcc8e24b8eb007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f480b30c1000004030046304402207fdc8d2f02d995fafabc7aeaf5d81570f7bbbb52ba38e48b11be47585e9b6886022027f4da84bf113475dc4c72719c33d86956d9054949ec0b07194de60c9e8dc20e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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