*.lexpress.fr

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:aa:22:16:82:03:5b:b7:60:c6:b8:96:13:aa:04:23 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.lexpress.fr

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:aa:22:16:82:03:5b:b7:60:c6:b8:96:13:aa:04:23
Serial Number (int): 15504889804768205941713176779614192675
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 30:df:c8:a4:12:ec:85:37:6f:b3:e4:20:1b:be:bd:5a:fa:d7:0f:30
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 44:63:4e:96:c8:06:75:88:6f:57:58:88:95:76:c3:e4:f3:e0:91:2f
Fingerprint (sha256): c6:6f:5a:a0:bc:7e:e6:14:f7:c2:ae:bd:b5:9f:5a:b8:37:ef:3e:fa:62:67:f6:5e:03:d2:fb:6c:14:e0:7c:4d

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.lexpress.fr

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lexpress.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lexpress.fr
static.lexpress.fr
moncompte.lexpress.fr
customers-admin.lexpress.fr
production.moncompte.lexpress.fr
api-customer.lexpress.fr
api.moncompte.lexpress.fr
production.flow.lexpress.fr
production.customerhappiness.cloud.ger.systems

Other certificates including the domain name lexpress.fr

(limited to 100 certificates)
aconsommerdepreference.lexpress.fr
lexpress.fr
applications-mobile.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
contrat.lentreprise.lexpress.fr
tr.news.lentreprise.lexpress.fr
*.lexpress.fr
defigrandesecoles.lexpress.fr
smartphone.lexpress.fr
zm5d.lexpress.fr
contrat.lentreprise.lexpress.fr
*.lexpress.fr
vins.lexpress.fr
api.moncompte.lexpress.fr
guideachat.lexpress.fr
tls.automattic.com
moncompte.lexpress.fr
oauth-admin.staging.abonnement.lexpress.fr
defigrandesecoles.lexpress.fr
bestmarques.lexpress.fr
tr.news.lexpansion.lexpress.fr
staging.abonnement.lexpress.fr
tr.gestion.lexpress.fr
livreblanc.lexpress.fr
event.lexpress.fr
sni.cloudflaressl.com
lexpress.fr
cours-anglais.lexpress.fr
tr.news.lentreprise.lexpress.fr
assurance-emprunteur.votreargent.lexpress.fr
support.lexpress.fr
tr.news.styles.lexpress.fr
zm5d.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
production.customerhappiness.cloud.ger.systems
guideachat.lexpress.fr
livreblanc.lexpress.fr
*.lexpress.fr
seanapse-box.com
aconsommerdepreference.lexpress.fr
smartphone.lexpress.fr
staging.webhooks.abonnement.lexpress.fr
aconsommerdepreference.lexpress.fr
abonnement.lexpress.fr
lexpress.web.arc-cdn.net
support.lexpress.fr
*.lexpress.fr
tr.news.votreargent.lexpress.fr
tr.news.styles.lexpress.fr
tr.gestion.lexpress.fr
staging.api.abonnement.lexpress.fr
zm5d.lexpress.fr
tr.welcome.lexpress.fr
aconsommerdepreference.lexpress.fr
js-pre-boutique.lexpress.fr
lexpress.web.arc-cdn.net
tr.welcome.lexpress.fr
staging.abonnement.lexpress.fr
livreblanc.lexpress.fr
sandbox.api.abonnement.lexpress.fr
zm5d.lexpress.fr
tr.news.lentreprise.lexpress.fr
abonnement.lexpress.fr
devis.votreargent.lexpress.fr
tr.news.styles.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
*.lexpress.fr
energie.votreargent.lexpress.fr
livreblanc.lexpress.fr
infos.lexpress.fr
aconsommerdepreference.lexpress.fr
event.lexpress.fr
livreblanc.lexpress.fr
tr.news.lentreprise.lexpress.fr
livreblanc.lexpress.fr
assurance-emprunteur.votreargent.lexpress.fr
tr.news.lexpress.fr
tr.welcome.lexpress.fr
boutique.lexpress.fr
*.lexpress.fr
shopping.lexpress.fr
tr.promotion.lexpress.fr
smartphone.lexpress.fr
tr.gestion.lexpress.fr
defigrandesecoles.lexpress.fr
energie.votreargent.lexpress.fr
aconsommerdepreference.lexpress.fr
*.lexpress.fr
mock.lexpress.fr
codepromo.lexpress.fr
livreblanc.lexpress.fr
support.lexpress.fr
extranet.lexpress.fr
staging.abonnement.lexpress.fr
energie.votreargent.lexpress.fr
zm5d.lexpress.fr
event.lexpress.fr

Certificate

The complete raw certificate details for *.lexpress.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0DdXlVaTyerpQsXeuUW
JHcDCYp4Wbf5kXqXF3qDnXHQ7ZRAOaVcdL40AraHGhco6LYem4t4f9pcGjRr0wmK
/GszGfqdURCedkGWUUm+pDIjp+rt9lEet8265OFpByRs4rglUFc2YoBC0O++wlHR
KvCyRE78RBHRN5oqEnfFd+5zbGLw5DDih6v0LOcCT6pEDbW23W5g5h7RTFk8YXMg
/H/N1OMPHe2En3oe+ZFsEzWHW3YHhVV81rfezzm9cbmgCs3F+u5sWWQKr/T+KSGg
pUr46oed3kVJhyhUtl8iFC+u2J0QgEKkLzIY/YcZG7zz/o1LwQ9V+hCd65W3ouDS
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15504889804768205941713176779614192675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lexpress.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23133595794681965811873167296619229503142811649961398122314641904110338126835922242294958291634664234263024125549361602933164289523938160833662362197555862548540740749539856122603089739380127433145266471287086505715288883177732663460492942525479559267207254781466432889112930901587980275210029622247281353683285630553160210433504693086712402686883557854097351712713375799654632551301014769527863493372126511345710628993629677156670830721981657571346468131014605161128922207685228245653470240031414229451666432097162671792410068478503810757696414298464851647581852447871753063852167283989885233617274686298923504554733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30dfc8a412ec85376fb3e4201bbebd5afad70f30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (254 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncompte.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers-admin.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.moncompte.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-customer.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.moncompte.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.flow.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.customerhappiness.cloud.ger.systems'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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