workdrive.citetech.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:04:d7:b8:25:e7:0e:cc:3d:5a:a8:c1:94:7d:7a:40:38:01 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=workdrive.citetech.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:d7:b8:25:e7:0e:cc:3d:5a:a8:c1:94:7d:7a:40:38:01
Serial Number (int): 262984727433435661691331455537498384513025
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:c0:87:02:57:ee:81:4f:ba:0c:83:25:a1:a1:e9:cf:a2:fd:81:1d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 86:80:66:de:a2:66:88:83:41:d7:cb:8d:c0:1c:1d:ed:6c:c6:61:50
Fingerprint (sha256): cd:53:f3:b0:2f:3e:79:7d:c0:a8:1c:44:1f:ec:52:ee:96:8c:ab:8f:f2:0b:8c:3d:4f:fb:3a:c5:ed:9e:ed:cb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate workdrive.citetech.fr

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for workdrive.citetech.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

businessportal.oostendorp-autogroep.nl
cloud.tulua.de
dmdocs.ipquants.com
document.luxurybrick.com
documenten.yntro.be
documents.dicodata.it
drive.ado.media
drive.flatguest.com
drive.littgroup.co.uk
share.sheshtech.com
shares.terrytechnologies.co.uk
sharing.marcolino.pt
vault.legacyguardians.co
workdrive.citetech.fr
workdrive.demmerys.com
workdrive.dimarketing-salesconsulting.de
workdrive.easy-grundsteuer.de
workdrive.enmarkados.com
workdrive.memorialsofdistinction.co.uk
workdrive.ropca.com
workdrive.sarltechmax.com
workdrive.villanomad.ch

Other certificates including the domain name citetech.fr

(limited to 100 certificates)
drive.newtonbates.com
workdrive.demmerys.com
cliq.hesse-vorrichtungen.de
citetech.fr
documenten.yntro.be
businessportal.oostendorp-autogroep.nl
workdrive.agenciacom.com
team.zebrabyte.co.uk
documents.motormarketing.de
citetech.fr
workdrive.gam-bit.com.pl
businessportal.oostendorp-autogroep.nl
workdrive.charly.co.uk
chat.la-iii.com
chat.kundenwachstum.de
businessportal.oostendorp-autogroep.nl
workdrive.citetech.fr
businessportal.oostendorp-autogroep.nl
chat.kundenwachstum.de
citetech.fr
workdrive.charly.co.uk
chat.kundenwachstum.de

Certificate

The complete raw certificate details for workdrive.citetech.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIV4p73CMWXGZGjPqAJi
MwvSMVWbE4kWHy/UN5rKOMsVaJYZ+Eb9aEfNYW4tAcQlm/nhcXO30PCaAvCq4o6H
bkyxMEX8zZAW2S5dAjkqVjIPQfjE+XUSgTeXNy1JcNBSxZwEenCiS8MZl6KBdGZ+
CImCfaN1+yDXTGyFOwRVbTWQJSiIyhuzFe1qvmSaN7Fua0vcswLVU8cboBfFDX0f
uvAyxrl7ItvLlKPN8vgm0NIOLn8a/BJPPCyEwSRREcEhGKPJ2J9UCAkQ6kd0HxcE
fV4MhEK6ii3YW8imiyUezOkVoQp1pbz5hc/bYK+MoY0s9DXb3J19oZFNqgck6Olj
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262984727433435661691331455537498384513025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-21 04:26:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 04:26:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'workdrive.citetech.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22283758829793693964495552055827312968465763677342467102277767805851741818119131200189945486311465499245615531061837218588396419057782072765785839256828946741490543108704928731369623216568327162702853539242896492399726144227517280482259366833701402384051379674035823711937500437782973036682517474443140711758960406305737502415967158453557542901478456946446629054589203122061976791250677753372679619603754159192706906455851357759391551205970477825186802039992583911414825367107863707368975234497962984900663504003613528902019871750875028863164903823295246825376562224136337264854183353213656305462379577495134008861671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92c0870257ee814fba0c8325a1a1e9cfa2fd811d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (572 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessportal.oostendorp-autogroep.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.tulua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmdocs.ipquants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'document.luxurybrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documenten.yntro.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.dicodata.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.ado.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.flatguest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drive.littgroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.sheshtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shares.terrytechnologies.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharing.marcolino.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vault.legacyguardians.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workdrive.citetech.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workdrive.demmerys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workdrive.dimarketing-salesconsulting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workdrive.easy-grundsteuer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workdrive.enmarkados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workdrive.memorialsofdistinction.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workdrive.ropca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workdrive.sarltechmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workdrive.villanomad.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001835e82e64600000403004730450220145187e83e9d6daac15c51120290a0856b8912f9ce286aeba048a0bf87bbf0990221008d2feb62b9990b12e9ea423eeb690089a0c26796f9ab4f86e4643811234365cf00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001835e82e66b0000040300463044022031693128b1279af41c4f98040a575696e618bcefef8b6fb4ca7d6d047e9d74ce02206a4744789ddd270ed2da9a5205717758a31ab166b9b7eb04c41fef041e2d6b0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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