fayard.re

Issued by R3

About this certificate

This digital certificate with serial number 03:ba:63:40:8e:43:f7:76:46:6d:bc:ba:ce:9f:cb:12:35:39 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fayard.re

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:63:40:8e:43:f7:76:46:6d:bc:ba:ce:9f:cb:12:35:39
Serial Number (int): 324761306806643983434700524232254468273465
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:ea:4f:78:06:3f:31:1a:a5:6a:5a:96:ec:6c:2e:78:65:26:39:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 28:90:1b:2c:8a:53:a2:85:95:95:3f:f8:7c:ff:f7:9a:fb:45:54:47
Fingerprint (sha256): d7:1f:68:33:63:d7:66:e8:56:3a:62:c7:69:54:40:7b:dd:92:f2:39:12:4b:fa:32:4c:de:14:dc:97:f2:b7:3f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fayard.re

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fayard.re

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

at.fayard.re
dev.fayard.re
fayard.re
photos.fayard.re
vr.fayard.re
www.at.fayard.re
www.dev.fayard.re
www.fayard.re
www.photos.fayard.re
www.vr.fayard.re

Other certificates including the domain name fayard.re

(limited to 100 certificates)
fayard.re
portfolio.fayard.re
fayard.re
portfolio.fayard.re
portfolio.fayard.re
fayard.re
on.fayard.re
portfolio.fayard.re
portfolio.fayard.re
portfolio.fayard.re
portfolio.fayard.re
portfolio.fayard.re
portfolio.fayard.re
on.fayard.re
on.fayard.re
portfolio.fayard.re
portfolio.fayard.re
portfolio.fayard.re
portfolio.fayard.re
portfolio.fayard.re
fayard.re

Certificate

The complete raw certificate details for fayard.re in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqpfMKySr0E+qOpj8uy6
ULfwnPA0I1vgcjbVfZP8UU7DtkRACmnNoiAcVSwAn6AzcqbrApdYgKY2P4SFwhSX
OcYM6V5ICFUoDQHBT//E9OiwMqRKzc7ACQYfBw9DwzC0RgfwkmdRh+I2GuTdLcyv
hUTiO8hKdRXNRBCLhOCLsnBdrqIhEwEHL5aFZfKqD7ROCi1ZEUfDT7gvyLYKPWxg
RQ3+ldYOalynT9YO3ous8NGAnmST3VlN/wdFxRXz+IYoX4qyB3/4hA81spB06Adv
mofV/kjuCbERBXXmTv2drwucRWTBvRXPFOPmZ/3/8TyAnf8d6ls+Fk0d6i3SAw+H
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324761306806643983434700524232254468273465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 15:26:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 15:26:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fayard.re'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23564338207469778049827212771369772773323592828287101357449509538375687484292144715305108833482564527959261168648004105909205405216242282353362966104128107424686064095380661359408506098186300868747075389427257101392610786162714848993548630348473243431284935647313681751028843428547560379517385170815487976677440840956060086472573470217630313405791900173769105079497859524280358924910071669720386653946417810397199768678772257283421149957188031183506405823524631186375033864130631539876890566717991376225469190950974432709597265755494977458793722528716050173504476857741183679103691264328080760444563234909466559219533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0ea4f78063f311aa56a5a96ec6c2e78652639c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.fayard.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.fayard.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fayard.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.fayard.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vr.fayard.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.at.fayard.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.fayard.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fayard.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photos.fayard.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vr.fayard.re'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018acd2a0c6e0000040300483046022100c0bfde2d22ef32c5d1ea634ac36304de73409a1ff2708934623ad282e53c01b8022100d8c4a8f4d05f22fabcd89639d826c521da83bab38f61d1f82d18baca66e8eff3007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018acd2a0c66000004030047304502204d393cea91edd600a167ce1cd6012867d4761736f631031b41a8f52ad4430bc30221008fc81c32af92bb8dfd9e16f16a9b9e900162fddd66936106ff18a1938557c2c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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