*.castor-informatique.fr

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:98:2b:52:c7:2b:89:39:21:45:8f:ca:d4:c1:ea:c5 was issued on by Amazon.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.castor-informatique.fr

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:98:2b:52:c7:2b:89:39:21:45:8f:ca:d4:c1:ea:c5
Serial Number (int): 19399299765448547994454990239918320325
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0b:73:63:b1:44:3d:84:03:a3:89:eb:36:4a:84:5d:86:4e:36:6b:c6
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 57:57:c7:c8:0d:45:50:47:15:d5:44:27:39:2b:13:4e:4f:6b:45:54
Fingerprint (sha256): c5:44:b2:ae:16:0a:e2:66:cc:6c:48:45:be:de:65:2c:37:93:ae:1d:a4:ca:85:ac:45:0a:69:a7:58:a3:77:d1

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.castor-informatique.fr

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.castor-informatique.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.castor-informatique.fr
*.es-platform.quick-pi.org
*.concours-alkindi.org
*.quick-pi.org
*.beaveregypt.org
*.concours-alkindi.fr
*.majava-kilpailu.fi
*.it-platform.quick-pi.org
*.concours-alkindi.epfl.ch
*.algorea.org
*.suisse.concours-alkindi.fr

Other certificates including the domain name castor-informatique.fr

(limited to 100 certificates)
coordinateur.castor-informatique.fr
castor-informatique.fr
coordinateur.castor-informatique.fr
concours6.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
www.castor-informatique.fr
www.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
concours6.castor-informatique.fr
static4.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
badges.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
coordinateur.castor-informatique.fr
coordinateur.castor-informatique.fr
*.castor-informatique.fr
static4.castor-informatique.fr
*.castor-informatique.fr
www.castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
*.castor-informatique.fr
castor-informatique.fr
*.castor-informatique.fr
concours3.castor-informatique.fr
static4.castor-informatique.fr
concours3.castor-informatique.fr
badges.castor-informatique.fr
coordinateur.castor-informatique.fr
*.castor-informatique.fr
concours6.castor-informatique.fr
*.castor-informatique.fr
castor-informatique.fr
badges.castor-informatique.fr
*.castor-informatique.fr
static4.castor-informatique.fr
concours.castor-informatique.fr
coordinateur.castor-informatique.fr
castor.epixode.fr
*.castor-informatique.fr
concours3.castor-informatique.fr
*.castor-informatique.fr
coordinateur.castor-informatique.fr
badges.castor-informatique.fr

Certificate

The complete raw certificate details for *.castor-informatique.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GGnxNkz497yu2fB5YeD
ZjbpBGfJCh8gf68HTzV127tO0INdSNhc8EKZZhxhuE6t7g3N6T9iBvpq5xmNk+r1
3qATJexQDHJJ3FqTfqRMs9/9iP0wEm3cx1dhM3VNm1CRTizQi5lQSIxD/osyQs/v
AE3NFH1Yqqj3qHr0ETvBypAsBrn54Zbfh7I5b93jDlm2ug9kS79Dnflsftdb0jqy
LjkHW21ZRRoU+Divg8AARp4EkF8TNApepUbLcERPTr+1ZR1/Ldzma6aeI5iWDJl8
qx81X4nvBj/7oQS764clZyqJHgLYvobxuSS+x2M7bZlCJus+sg5WeRv++vkES2lg
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19399299765448547994454990239918320325
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.castor-informatique.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27315629519266472107916698904819021835320900448772743914933373652262442103649871459184277204640543246614895363177715330686992909225884620515554288147516718402583069860063701687377388607492447083005751564331391509203710365095276952526647419568275559204675641132444334368536157491330145003898966919210155496831894908303554141075225176207868448816543806408675385016835242388512257223551519673799973490659940797519731744372825174242547995626718282020513309001873747961297452693185250671601915894470344199713161527140216233169399696520527191512538820013063649086911878715438091552887801027765798426756584313224408519499987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b7363b1443d8403a389eb364a845d864e366bc6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castor-informatique.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.es-platform.quick-pi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concours-alkindi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quick-pi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beaveregypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concours-alkindi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.majava-kilpailu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it-platform.quick-pi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concours-alkindi.epfl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.algorea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suisse.concours-alkindi.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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