amitol.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f9:6b:09:9d:07:08:19:97:96:91:2d:fb:8e:4f:91:44:f7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=amitol.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f9:6b:09:9d:07:08:19:97:96:91:2d:fb:8e:4f:91:44:f7
Serial Number (int): 433321730401470788530716219258181268882679
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 94:5d:e1:52:68:73:f4:c9:8f:3c:68:81:eb:4a:5f:51:c1:d8:00:eb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:58:bd:e6:0c:68:a3:c0:b0:5f:94:12:b3:6c:fc:46:7a:7c:f4:36
Fingerprint (sha256): df:51:a6:db:93:37:d9:0a:a0:3f:e5:13:b8:eb:64:5b:98:8b:19:5e:ba:1f:f3:aa:d4:bc:e3:49:74:29:66:99

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate amitol.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amitol.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amitol.fr
www.amitol.fr

Other certificates including the domain name amitol.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for amitol.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433321730401470788530716219258181268882679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 21:42:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 21:42:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amitol.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819606084127505371052248548239905371164715495626945296963844019569032849379615426466814784486183844709046217820034543427111648674751718788881862445908114539510157243272552392714483443105390154244156536684700131039312742974755877664670793209624681147878237288450489351797276355278663846799199246742944058615086797617418793740951456383744001427061247244616219217059105545010910929765703586952522920873179242105716369471066137815991977886007084173953032681765505273608802901944780041155992648740578695288113574826256499727435619982403065886150832112815229558097837577107293334160975677378202101555420509091546438918794326854374967843018727890373585023154971765602600907336177987601846180262232901318927128922300114225863246780351260451815839293700836915449933413409575624935828437906618887509600422379841583127918985039514312109987292807355945642917423493798962252989019620519809888536084256387040934307950931746652724253955495803196570505569691001597450412143486397692125146727672644656761356684585941252505724956417412421736123850077083039832200232492470846006390535780823627010932547457160771004080068122232708057829431788530705933320588494527665418626488585712632778557816455568932068851777673754248542981143278017156830175204694987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							945de1526873f4c98f3c6881eb4a5f51c1d800eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amitol.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amitol.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b05c25a020000040300463044022069be25111ad4cfb93f9fb706953ee5935549c0d53b64547824cd102ef1cd7a5602206fcf2ae99632491119b8de13c2d5e61132c0e54e647e88a8fc76aa298a9a020000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b05c25be40000040300483046022100c30477fda58aeca7e31ede5cde541605c926ea2f843180cecee09ce18fdd90600221008ade7909537b4a061cd98b6d909391905d6ed40207156bdeb5656cb6191871ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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