rnmb.legifrance.gouv.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:fe:cc:94:d7:f2:55:6f:7c:05:ff:8f:11:07:a2:d9:21:cc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rnmb.legifrance.gouv.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:cc:94:d7:f2:55:6f:7c:05:ff:8f:11:07:a2:d9:21:cc
Serial Number (int): 348040514344192016767976242902328078311884
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:12:e4:ba:18:0a:74:19:4a:67:54:8f:67:1c:ad:2a:46:21:37:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:4a:ea:9e:04:a3:e3:04:d4:04:08:61:5b:03:2a:cc:04:19:b7:d4
Fingerprint (sha256): e7:d5:bc:ff:58:e3:8a:8b:01:12:09:68:84:a7:65:1e:10:65:89:2c:93:4c:bd:dd:2a:6c:e6:40:25:72:b1:fa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rnmb.legifrance.gouv.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rnmb.legifrance.gouv.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rnmb.legifrance.gouv.fr

Other certificates including the domain name legifrance.gouv.fr

(limited to 100 certificates)
ezpublish.qualif.legifrance.gouv.fr
www.ecli.legifrance.gouv.fr
imperva.com
www.ecli.legifrance.gouv.fr
beta.legifrance.gouv.fr
incapsula.com
ezpublish.qualif.legifrance.gouv.fr
imperva.com
preprod.journal-officiel.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
www.ecli.preprod.legifrance.gouv.fr
ezpublish.prod.legifrance.gouv.fr
www.legifrance.gouv.fr
www.legifrance.gouv.fr
www.legifrance.gouv.fr
ezpublish.preprod.legifrance.gouv.fr
incapsula.com
rnmb.legifrance.gouv.fr
api.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
incapsula.com
journal-officiel.preprod.legifrance.gouv.fr
incapsula.com
imperva.com
www.ecli.qualif.legifrance.gouv.fr
www.ecli.preprod.legifrance.gouv.fr
www.legifrance.gouv.fr
imperva.com
ezpublish.qualif.legifrance.gouv.fr
incapsula.com
imperva.com
imperva.com
ezpublish.prod.legifrance.gouv.fr
www.ezpublish.prod.legifrance.gouv.fr
api.legifrance.gouv.fr
api.legifrance.gouv.fr
www.ecli.preprod.legifrance.gouv.fr
www.journal-officiel.legifrance.gouv.fr
www.ecli.legifrance.gouv.fr
incapsula.com
ezpublish.preprod.legifrance.gouv.fr
incapsula.com
imperva.com
ezpublish.qualif.legifrance.gouv.fr
incapsula.com
incapsula.com
ezpublish.preprod.legifrance.gouv.fr
ezpublish.prod.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
www.ecli.qualif.legifrance.gouv.fr
www.legifrance.gouv.fr
journal-officiel.qualif.legifrance.gouv.fr
ezpublish.prod.legifrance.gouv.fr
rnmb.legifrance.gouv.fr
ezpublish.qualif.legifrance.gouv.fr
incapsula.com
beta.legifrance.gouv.fr
journal-officiel.legifrance.gouv.fr
www.legifrance.gouv.fr

Certificate

The complete raw certificate details for rnmb.legifrance.gouv.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAufkRjdj+GPl4kIjrakQY
uBaof7ogvPYyOhYvre5SEhpL4HNaZccHFcalvCI8WHCXNCkK4o0behHXklQ6qzay
XZjRZDEDzhDV6BC6vDKMrGhy5hd15olDlT+aD81GEBIWPSrY5Lr1kwowf4V9Mqss
gjMOV5xygJ7F3qlX6yF1c91y8ZLGqSYacbpJ5Bv8JwtpZAk0eT6J1EpMN3zEGy9v
JVdqS51Odrrrqjy40hjKe9wbtUxb64Q+dCr3HQROsGKzdmNoIv8QAnk6d61GBGBt
ptkj2SdkQrQeLhTYCcoNA5Rtlgvk4do9U+CYpOdbJcFPlUN0ZoXQ+Fn2jeTEBgl3
+iliIOW/l8gwC7wtlRT8d9VY4o1Yu8TCBZ/nNx7mmc0+raR0IEZzSvC3SYevMmpN
TPHDGQJ/KjZyhUeIWcxfQy+uLw24oJXAfOO3sRL23GbeAUPqfxRNXcw5Yvb7nZFz
KnEFU2NtNRCp3GtKS3pNx0J5wF9SOu6pmu2sYjWZavAu+ZIsIgBeokpkxRYs/Usn
MfCVHpMUG+H1ElOiY/4reZ3n2eWuOpb4MLUbQfBiH2ncnwRgXj+HvOw4cGJ/rdtA
kvjWcKKsxX+bcFZV8jonqvhR7bG89PrFtmgznP/HRwXLv7L3kfV2SaqAJU068msT
SPLwanXNd2bcGnZODXfu8hMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348040514344192016767976242902328078311884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-27 20:33:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-25 20:33:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rnmb.legifrance.gouv.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758703336634022120682403080363332109409244834144411579035273092720726701910996690660125082344321227334438216303614830989853848991949633531419955352815573745862689483917302542511113529166797407353661202417978076678780048040742861057444602288307028733334599744045124471306742299507934977894878383694854174177055453312769718509759747612086766696139246667917645837672731890959772930359565826873739421901310388310053908128667139528898880501658234153124501972132063989900578759681705121408404733982077853818398719272679547933777506318649579692313864453369068644818200944049316371686714966240226054435351197208562635471394372581478700938145825069103788286113515983268405974988343007132350264450950106657277382924622362045668639541557719986932598055380200803911536221830278943040908404811048546742883678324837556214615511960667482362069607265761193481642476619911695367355752276340562443903840776781980780451009422625687603800834019271336622678221150250795691475977261712742641547457158889965047613358909957955879362698150739439628798660428406900549875340999235920268382322107346382498971700977966279505234839115860026206155563061837952465823014023511036791823226723571733275493456784205627422540564117275350096822757436429069394082012262931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b812e4ba180a74194a67548f671cad2a462137a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rnmb.legifrance.gouv.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018724fd91c80000040300483046022100ec143ee2e8c0625063d63dc44e9ffccb6ffe4a0445caaf190fe654db84084fb70221008aa1b1280539dd36d6af37c291a0af0c09600247e3804e4b186da89ea9ddcf40007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018724fd91d30000040300483046022100851db7fb85abb40a0f81e142329a2ad60c1d98514e89d28be8aaa1b91711118d0221008a102b2f91b0c129f3bcc2b48da763d89acda74ccfe31b24dd5c0e1ee3c58263
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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