annexio.fr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:07:a1:c6:b5:42:13:63:a0:96:13:78:fd:65:9e:ae:c1:0b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=annexio.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:07:a1:c6:b5:42:13:63:a0:96:13:78:fd:65:9e:ae:c1:0bSerial Number (int): 263933871822177868179606875174915623797003
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0b:21:d3:e8:c9:46:da:26:c3:96:15:b7:d0:09:24:84:c9:cb:20:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5f:ae:69:e9:07:bb:57:02:52:aa:87:39:d5:d3:91:a1:e9:f2:0a:a5
Fingerprint (sha256): d9:4e:4d:ca:05:c3:ef:f2:f7:bc:7f:96:30:3d:a4:17:76:b3:7f:a7:36:8c:b2:aa:90:29:da:b8:83:bd:23:a9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate annexio.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for annexio.fr
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
annexio.fr
www.annexio.fr
www.annexio.fr
Other certificates including the domain name annexio.fr
(limited to 100 certificates)
Certificate
The complete raw certificate details for annexio.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISAwehxrVCE2OglhN4/WWersELMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MzAwMDAxMjBaFw0x OTA5MjgwMDAxMjBaMBUxEzARBgNVBAMTCmFubmV4aW8uZnIwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQC4OU4QSesWRmLiBTCJsO8iO6fMNW9hvosq8ite C3E13ae9WUyth/XeIyluxQ0hzjJaVhtb4hxjp+7OEMJoaF8abzeZaGY1SmMyeHU3 Cl0k7ys50avprVS6wANT2GBf0kQfoWRCO7qtv0+k3IT8s5vAWGsB3dIw3iECqwqk sCATXmKSBlM2kBfvOWFa+F+J4LyW3QUjNKSZ4jA+2V3KWok3vdlR9waDzyf6ydtp Z3oeUUkkNCE0awuz2YfmC2X9h0luWMeU5vicK/GefAWE2yogy/SA1QjBs7eGl/e9 xeEK7k0fBBsPnGZ+UcEXqiQr3m22GlExFmODCOe26nnVxb3gtlbeBmxy/bF/zF/J M8eWgSzISgm0LE96dz7ntQWvYbuO2eTXzMOQ+Ze68gLQEz5OggejzU6E8I/yON0N vsgt0PQAEMD7xgtLyw5mBXpPUIQAdEOyoOgNEGfnnWYt8aW6u3dWaCWQvR3EWyJF k2yq2IxT+9/1z6flcay731JC5m+zrtq9Hc7HnBzZoNpSiOGW7sNlNIEnr45Rroi3 NqouYrnhc4047K6aRI1GYpdWH1UP1NJepWFmTv0TiZPSTpiKs+tGOdtloTyf9AjQ z0K/WAxN0i3HaWKk5G0URQAdRju/ewk4frffzqUBXo7I66TkwjlPjsMq8duVEoHb fWmzKQIDAQABo4ICbjCCAmowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQLIdPoyUba JsOWFbfQCSSEycsgVzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCCmFubmV4aW8uZnKCDnd3dy5hbm5l eGlvLmZyMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYA AAFrpeaUrQAABAMARzBFAiEA31jlLnw2BnMGw4vKiyfs6tFO1BF6mfNdqvXAg836 P/8CICc4NeDTSSgnEwVZpvY0HXCZfQU/zWYaI+xrIM2A0cZsAHUAY/Lbzeg7zCzP C3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFrpeaUnwAABAMARjBEAiAWotHs6XLo O5arRNzkByxN/an4Qqvw7FrUUTM9fNtACgIgCqDFQfn2dbQwdBCBRq+089thLJoZ sALAdA3lCw445kUwDQYJKoZIhvcNAQELBQADggEBAEONujerd5YetfDNGBOP8UKx z5k2WERdVICb++q0sxeqCBrhk3F9/yheqZjfCnGP4UkRXTk/jpC0MQU11mFaRLie VdV4kC5phiJ/ZiLF+I5maVIMV5lqhf+C4Ia6UN8doOkZfJmRdKS9F0xxEuQrbpse 48UEDDZOBzTEGdhL3FkKROhQmsdIMknaBnvZ5uPsOOcGca0NWfUS0g9ZCdOhtKh7 LZQ97QVHth/ykAto3HL1jIFcYsfO1QhiAedI53PxnhBE2EH6oxRTgwf/puNJdBoy JwvtjWzlZHAPeBszAGiIzMUZvE/701XMfFNV1ZDKImGsH8092ggN2pPemiJlVdY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuDlOEEnrFkZi4gUwibDv IjunzDVvYb6LKvIrXgtxNd2nvVlMrYf13iMpbsUNIc4yWlYbW+IcY6fuzhDCaGhf Gm83mWhmNUpjMnh1NwpdJO8rOdGr6a1UusADU9hgX9JEH6FkQju6rb9PpNyE/LOb wFhrAd3SMN4hAqsKpLAgE15ikgZTNpAX7zlhWvhfieC8lt0FIzSkmeIwPtldylqJ N73ZUfcGg88n+snbaWd6HlFJJDQhNGsLs9mH5gtl/YdJbljHlOb4nCvxnnwFhNsq IMv0gNUIwbO3hpf3vcXhCu5NHwQbD5xmflHBF6okK95tthpRMRZjgwjntup51cW9 4LZW3gZscv2xf8xfyTPHloEsyEoJtCxPenc+57UFr2G7jtnk18zDkPmXuvIC0BM+ ToIHo81OhPCP8jjdDb7ILdD0ABDA+8YLS8sOZgV6T1CEAHRDsqDoDRBn551mLfGl urt3VmglkL0dxFsiRZNsqtiMU/vf9c+n5XGsu99SQuZvs67avR3Ox5wc2aDaUojh lu7DZTSBJ6+OUa6ItzaqLmK54XONOOyumkSNRmKXVh9VD9TSXqVhZk79E4mT0k6Y irPrRjnbZaE8n/QI0M9Cv1gMTdItx2lipORtFEUAHUY7v3sJOH63386lAV6OyOuk 5MI5T47DKvHblRKB231psykCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263933871822177868179606875174915623797003 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 00:01:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 00:01:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'annexio.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751567726259493889771124213344294404192682316065871228607342241372326339326369333720763122310579887153736233703982895619862807505790343187293946206927228022711463456451980202530643843240379022504838445009711379974420982925592660717380601749045721102974932261073863450652525106399476030419015154694742864692928915885587691155562978270906597809899434814415588060106735307950280194930203427108335792284005747469730166575000040937584866883364726416083951588104039917803126274539376153577134283856927967958962136169716401276990680213153750366281885538805379879183566980382644990259153763623780426190037823123087324204015592018900253955925755760113087649365302300287493243456612353047720908497275826251807479265224102136930130646256455354249727794387366036444450055006968071278255001718119475294253988256177812517498423574587429948310985838893608780146758031844260688546387443037362389201691415582222148815568708936693467272204257138543463293334024029916948412350026202706887235522837969876684941979717729445149792600322118246657584889040082583482175772723200725498161137937002391558673443416635766228702179060128965563307701869289975150672008560295715877516698204803258204801548664902489355172898997562420474837523487566116481024643412777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0b21d3e8c946da26c39615b7d0092484c9cb2057 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annexio.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annexio.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ba5e694ad0000040300473045022100df58e52e7c36067306c38bca8b27ecead14ed4117a99f35daaf5c083cdfa3fff0220273835e0d3492827130559a6f6341d70997d053fcd661a23ec6b20cd80d1c66c00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ba5e6949f0000040300463044022016a2d1ece972e83b96ab44dce4072c4dfda9f842abf0ec5ad451333d7cdb400a02200aa0c541f9f675b43074108146afb4f3db612c9a19b002c0740de50b0e38e645 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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