047463.tc-connect.elior.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0a:50:41:f0:18:5b:28:4a:1a:c3:d0:23:79:d5:2f:f8:8b was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=047463.tc-connect.elior.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:0a:50:41:f0:18:5b:28:4a:1a:c3:d0:23:79:d5:2f:f8:8b
Serial Number (int): 351958648004916961874376120862447384918155
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c6:87:af:20:d6:dd:f2:94:07:da:a4:d1:57:58:f1:28:56:78:25:90
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:87:fa:30:48:24:5a:32:b5:0a:02:4d:c1:9a:ca:61:2f:d8:d9:98
Fingerprint (sha256): db:c2:7b:47:b4:5c:a7:3b:4f:6b:ed:a0:04:e4:e1:41:b5:4c:2a:64:a5:e7:05:43:e4:7b:46:85:8b:f6:54:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 047463.tc-connect.elior.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 047463.tc-connect.elior.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

047463.tc-connect.elior.com

Other certificates including the domain name elior.com

(limited to 100 certificates)
*.dashboard-rec.elior.com
toptrack.elior.com
049633.tc-connect.elior.com
bonapp-api.elior.com
*.elior.com
mobilite.elior.com
*.elior.com
mkt.minasdepresentes.com.br
achats.elior.com
webmail.elior.com
webmail.elior.com
timechef-v2.elior.com
portailrestaurant-dev.elior.com
kanji.elior.com
005653.tc-connect.elior.com
webmail.elior.com
applis-elior.elior.com
roomservice.elior.com
060001.tc-connect.elior.com
imperva.com
049629.tc-connect.elior.com
webmail.elior.com
*.elior.com
dashboard-rec.elior.com
048839.tc-connect.elior.com
portailrestaurant-rec.elior.com
toptrack.elior.com
toptrack.elior.com
timechef-v1.elior.com
bonapp-facturation-api.elior.com
apptable.elior.com
servichezvous.elior.com
toptrack.elior.com
bonapp-facturation-api-rec.elior.com
monparcours.elior.com
servichezvous.elior.com
webmail.elior.com
*.elior.com
bonapp.elior.com
webmail.elior.com
monparcours.elior.com
kanji-auth.elior.com
recrut.elior.com
applis-elior.elior.com
timechef.elior.com
smartordering.elior.com
webmail.elior.com
*.elior.com
achats.elior.com
060892.tc-connect.elior.com
047463.tc-connect.elior.com
*.elior.com
chefsandgo.elior.com
roomservice-v1.elior.com
monparcours.elior.com
003368.tc-connect.elior.com
remotectrl.elior.com
*.elior.com
si-pro-tre.elior.com

Certificate

The complete raw certificate details for 047463.tc-connect.elior.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351958648004916961874376120862447384918155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 21:04:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 21:04:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '047463.tc-connect.elior.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739704427090053284233332624027719055606972838325200519343370465420164127736644898129241855616002425118975559973990510911427057936904912620043628068015605375537919227641722558378833326143020388024303345247641516150518636222348539490606070927948187864301630199086495911629120915587640019387247153835792867879485038749126504549900534299128907838482521638835678850296126756967011680402239459240126150117935171813723372582451569871212250150293650206969798632129641680400990271623344773731887731811224864179739854462625353809009533741597341807698752361476607677763342266353613129263884297799521574608793736060082446730685380142595296245867892089448878693628570503545022776231731410629437686240143027694027820726135381053914906737561452256332774694732837595061764072730487448498091438872737469568918639397018070200550105717676167994068967118981026735659994746896653322166884802238671287684962806017510848921876963506235201313688452650971884135745295411445188121792685911747236711002161311925879937033087513147671421519113648291477901837348325927390893348732970007769976154360501646378992215834860863355743386835871733061036673112021751647979337779358874987440693465371791399103697244866508582021896783838094363020303442150392209757752034813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c687af20d6ddf29407daa4d15758f12856782590
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '047463.tc-connect.elior.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ecf30fe46000004030047304502205e9f3e492278dcc4e873ccd98409df0ebd2104649fcaf567c750d1ba20729ca902210086b0a332106c8a525c89801f55b6f4e2c63c7aa9964bf84960b96bc0206102470077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ecf30fe3a0000040300483046022100d6b2a3da61fc9d4f85b4c1bc10cb6eb7b3a6a5829093b415cf2d24c74288a90b0221009fd5823a91a02f6c0bce86fed91c8fdc7e101525be54ef672b0f2619a3d6d353
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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