www.synergiediag.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:56:19:4b:6b:c1:da:4a:02:25:3b:3c:e4:31:cb:07:e6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.synergiediag.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:56:19:4b:6b:c1:da:4a:02:25:3b:3c:e4:31:cb:07:e6
Serial Number (int): 265194408776188157338849717390371774466022
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:b1:2e:41:63:4e:35:c5:4d:6e:a5:22:f2:68:73:f9:da:98:d2:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b8:bc:58:a9:01:c3:cf:3b:8b:d4:49:0c:df:29:e3:25:34:b9:0d:73
Fingerprint (sha256): b6:c9:b2:f2:75:f3:cd:91:10:7e:42:04:81:be:8e:4b:0a:b5:aa:0b:f3:e9:a1:cf:c4:46:e1:a6:1d:fd:5e:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.synergiediag.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.synergiediag.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

synergiediag.fr
www.synergiediag.fr

Other certificates including the domain name synergiediag.fr

(limited to 100 certificates)
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr
www.synergiediag.fr

Certificate

The complete raw certificate details for www.synergiediag.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265194408776188157338849717390371774466022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-22 22:15:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-21 22:15:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.synergiediag.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 944676066357146141383573410401673458136533643346768884757380348140996311304223918392275095568397961190727679702311214084670742198176965536731299133863331510567024457163672983224830707630012192743565837212049168442604928311509902213914585879429355271739766204071551258187609229133133335495111113067291050913001687768303686841498414483702839519067942792767642318970990833699414968537537932818968119857679301370715369784034642011559832817582832629562485442184697503345979997229139327327070681656191757012172004234321186995009826339208662412739330316438204217837724449400259206363943612880260468070886247980868884854433767716967939089531214426216543318662389601535523617110940359460166092260119961531739647474207960921287873504001410209679290985236038327559382905584252113475051177141807715236051006548045816306875042677092494505377580910579843386146689099079360989711287699562903932595354897099992137302623586418391392326589249454941925920736656300854108356953891173404961761757484472123983667438230815680701080016192362241730236685840732518186539385834742937965100654119516132732710153215123355945647748179690110041320017398861951128919319304648542146199836375867044585982823316161011610147401930593609198149261739697929618081498461979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7b12e41634e35c54d6ea522f26873f9da98d2a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synergiediag.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergiediag.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162efa417580000040300483046022100fbeb35ec30663ad0ba3cc084364d349ae08f893e4bba68d946f02f83f5f4e8e3022100d4c267d738f21071f22e72d194e203c941fddc324cabdee27401c25fd64adbbf007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162efa417790000040300473045022100a09c77f1d6cac9ac93748ecaabc5a5c8958e73be36f841171646a061727a5e2902202b18bff21ce9771afb4fa99ad33b6f626743a7addef0afcc8ae937e1d755577a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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