sfi.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:ea:63:52:55:ff:f6:53:5f:1e:a6:14:42:b3:b6:01:af was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sfi.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:ea:63:52:55:ff:f6:53:5f:1e:a6:14:42:b3:b6:01:af
Serial Number (int): 326302062568632911040224168181430725509551
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:ed:a0:fe:b3:0d:78:47:0a:1b:9a:99:7c:7c:3f:b6:4f:06:1a:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:4f:dd:3e:50:7f:4c:f3:b5:9f:57:b2:4f:2e:ed:be:57:46:c8:4d
Fingerprint (sha256): d8:97:53:5a:ae:98:6a:53:b3:d6:4d:95:a9:ff:b1:0e:a2:59:28:4c:76:7d:d9:74:9d:23:39:83:c1:c2:2a:5a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sfi.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sfi.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sfi.fr
www.sfi.fr

Other certificates including the domain name sfi.fr

(limited to 100 certificates)
sfi.fr
crm.sfi.fr
crm.sfi.fr
jobs.sfi.fr
cdn.sfi.fr
sfi.fr
jobs.sfi.fr
sfi.fr
sfi.fr
sfi.fr
sfi.fr
crm.sfi.fr
sfi.fr
sfi.fr
cdn.sfi.fr
sfi.fr
crm.sfi.fr
jobs.sfi.fr
jobs.sfi.fr
sfi.fr
cdn.sfi.fr
sfi.fr
jobs.sfi.fr
sfi.fr
crm.sfi.fr
sfi.fr
sfi.fr
sfi.fr
crm.sfi.fr
jobs.sfi.fr
sfi.fr
cdn.sfi.fr
jobs.sfi.fr
jobs.sfi.fr
jobs.sfi.fr
sfi.fr
crm.sfi.fr
sfi.fr
crm.sfi.fr
jobs.sfi.fr
sfi.fr
crm.sfi.fr
jobs.sfi.fr
sfi.fr
crm.sfi.fr
crm.sfi.fr
crm.sfi.fr
crm.sfi.fr
crm.sfi.fr
crm.sfi.fr

Certificate

The complete raw certificate details for sfi.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14CbBRIB7HV2RJsYE2Id
8DnoelxVKXoZwGvTcXgyFoRokBZ/Y6/70N1CheyHPfGzvilDeDfYzjqLLn+2va/x
UsrQY7sLJURflnqPCXPjdhrUSwwbA9MLo2CfkveGHaM8V4pGn1ZWpu1UfFLIK9nC
eaYHBgs5z9r+e1PrGGYqvzJzM5uAm2Wm9vDTyFyj4agTZvO4Nu4+j79JsEQuU968
Li79PSXB6hXkamc1ZwkQzD8vNU9KwPLqACbSQqTCLjNcB3MezVyZzuMGR91I9G+1
9AvJ2Pk+AU+OKGlhA7Q+rmCUncYF7J+5bT1FS0jkHoEugA+kG4zwxqECy4Xnl0yN
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326302062568632911040224168181430725509551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 11:13:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 11:13:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sfi.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27204653326105257326508329875680837193121755953712326590679478756457216629952590762494328775486879341425178518338223709701160684277585358811903486147690744252766856362312602093703447031652027792502140198636142586946774135520718987360413504144922461443090399706825045994528378126486939307920720048845989935651628143323241496620500062451643955482665967523152679373666245767379829773162484992201121847618341141364600731457683857316788569774491242366342391592296088063578931700570618057415308762343990564691093498086053391189615329743172186104308846045352376848094524030038234718305937158645146360588904883075715273887103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0eda0feb30d78470a1b9a997c7c3fb64f061a3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfi.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165f1bfc184000004030046304402201969aab666b2d0541d90cf8610c3c3fdb9ca2c9e16dee410d13de23e2e46ab7a022048efa95a1c21f2a5c84af6cb63d2d8916783bb1066171302cbb139e426b2c388007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165f1bfc1bb000004030046304402205120e35bc9eac5d04ff0f22d5fddc6cf2e9774bfbe9a248b44b8b84edabbad75022028a6f4656131008b79775739d8e37768c1ca52ff2caf297c249c087c3f054391
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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