f2a.fr
Issued by R3
About this certificate
This digital certificate with serial number 04:03:f7:07:f2:f9:09:fc:84:34:2a:cc:f2:e5:4d:aa:37:9a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=f2a.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:03:f7:07:f2:f9:09:fc:84:34:2a:cc:f2:e5:4d:aa:37:9aSerial Number (int): 349798351416914713129752050075524877924250
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1a:9e:c8:db:f4:f3:5a:82:ef:bc:18:c6:28:12:04:47:80:26:64:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 03:b3:03:ed:55:cd:76:90:28:59:57:dd:cc:9d:b0:f5:e0:c1:84:25
Fingerprint (sha256): e8:03:73:ae:b4:6a:85:2d:55:32:f7:b0:94:9a:7b:f1:76:1e:36:48:fd:fe:ce:c3:24:b8:e9:70:db:6f:b1:28
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate f2a.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for f2a.fr
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
f2a.fr
www.f2a.fr
www.f2a.fr
Other certificates including the domain name f2a.fr
(limited to 100 certificates)
Certificate
The complete raw certificate details for f2a.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISBAP3B/L5CfyENCrM8uVNqjeaMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MjIwNzA0MzZaFw0yMzExMjAwNzA0MzVaMBExDzANBgNVBAMT BmYyYS5mcjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOFJ5uKvZz0Z O33mYjen0sKsHn12Ygw2sQOhsmWuOqj3V4/SHkVTLeEu2tZweAPknTBhyWN+YPGJ /1HgJ3lm1fvCWPDc736LIaXrHYC2h69lT3KlOp7NvQj8OsBsJGLq1hLD9UreS0PD bEjv2S3xMpc/S40mm1X/TyJ1WCTgpMIaSWmFgsJ248KXYQB0NMxc0lQ7KG4OBox1 4DdEAzRi79c3UjIUtmzUiJFSqG3cGJu/zC9bHJBTA/cDlL7WQ25tcp1CumCvXhXu 7J97LNJMXgcvMsWVDMd82Gsqfb/27KQZsXn5FRIYlunnWo4Mw6551AZx4OOT6WYN EHtBOCyRqXis6EpsBlS7iToq9JBuawozKW09pnszbVlxibdVW5G/P7QTy1sEMLTL OVk+I8tUIMemkIfa/KXWCDlLUdZI2cgRnoIEnEeQDb/Qj9oaxslCmoJkAQQZJLRr EJfFtDk5c6g2Y4F/Qez4A8OxFgmtdhEo6kkujB7ZSJp1QZeT36+VkzWx4xXCpE5M pyJdzkAJFNkGh+kCU7YHzfJIhm8E2rQe38Mw+xaX/Hhb8Lidxuzly51r811AQc8o lOh71afNvTWso5ynIIhQLxLmC9PbPZXtY8Ub0icJxWKOnobcS7skfsrk1kc265H2 4kQ6ukT4X/d8oYE+9ghpGsDgQpA0tOTHAgMBAAGjggIUMIICEDAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFBqeyNv081qC77wYxigSBEeAJmSOMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMB0GA1UdEQQWMBSCBmYyYS5mcoIKd3d3LmYyYS5mcjATBgNVHSAE DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ALc++yTfnE26 dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABihxGMpEAAAQDAEcwRQIhAJtokvTy PDHxl9DiCgJItWQrSf7JQj2Cvcn0dtqxzkdJAiBi4WqVAzJ40yt30KzuiKbg3m8q wSTW8xDrObboRiC71AB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1u AAABihxGMpoAAAQDAEcwRQIhALoSm5ufYaxQd3SuroZhKgfvkqnzgFpJ0G6sUWYI kmKaAiAmeGy14dsJF1mB1mOYnLd2ObIo26dcqUcWRVbQKL/U0TANBgkqhkiG9w0B AQsFAAOCAQEALkqk14eNzZkztLEbDFT8LLolg/BsnnFvuE2mbbQm2LhaGFvsSh2T 0NrZRFOMshn4kr0BRPh9lH3Kcp1oyKd2GPJZGqISoEisVc0U+B+SIf7bECIb/eo8 CbBqgqG94jbkkM42ABnIn1aaAWh0yZ7e4eIbcQflwrpn+ggsqb5AU4ih3R90o20Y ASa4HJp17/3QI8LYhI2anrWWYavri2aCvoUX2ZZ57f53ocgyYkU2Ej0puBkPuidR glf4EIqPKdirvdas+wOnBBbGGSdtyfyJMXcvm/oKzVO5B9tXA/CildvA7/lMB28X Gd/0EASDfc6p+dbCw6ymKaj7KZHljUPfUQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4Unm4q9nPRk7feZiN6fS wqwefXZiDDaxA6GyZa46qPdXj9IeRVMt4S7a1nB4A+SdMGHJY35g8Yn/UeAneWbV +8JY8NzvfoshpesdgLaHr2VPcqU6ns29CPw6wGwkYurWEsP1St5LQ8NsSO/ZLfEy lz9LjSabVf9PInVYJOCkwhpJaYWCwnbjwpdhAHQ0zFzSVDsobg4GjHXgN0QDNGLv 1zdSMhS2bNSIkVKobdwYm7/ML1sckFMD9wOUvtZDbm1ynUK6YK9eFe7sn3ss0kxe By8yxZUMx3zYayp9v/bspBmxefkVEhiW6edajgzDrnnUBnHg45PpZg0Qe0E4LJGp eKzoSmwGVLuJOir0kG5rCjMpbT2mezNtWXGJt1Vbkb8/tBPLWwQwtMs5WT4jy1Qg x6aQh9r8pdYIOUtR1kjZyBGeggScR5ANv9CP2hrGyUKagmQBBBkktGsQl8W0OTlz qDZjgX9B7PgDw7EWCa12ESjqSS6MHtlImnVBl5Pfr5WTNbHjFcKkTkynIl3OQAkU 2QaH6QJTtgfN8kiGbwTatB7fwzD7Fpf8eFvwuJ3G7OXLnWvzXUBBzyiU6HvVp829 NayjnKcgiFAvEuYL09s9le1jxRvSJwnFYo6ehtxLuyR+yuTWRzbrkfbiRDq6RPhf 93yhgT72CGkawOBCkDS05McCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 349798351416914713129752050075524877924250 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 07:04:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 07:04:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f2a.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919097624028871109047999609979973667683430422132056294068651270750451039346163732724065054985788971626022753948212250810764240628816528798305976832420613746663648326497303817130085647887807167407260775426777940886540794653813972927452255971999758859100482680725874857870746071426423434964626465230064166739992328127045480775455233643851928024576424665389815932071005030687713487270894086441329058575421473836478438282987386400042523270595857865243035080997797940141160825051138297239083042909912178504741963647532061580185275113241044976506838002713627882447533341120100554446075287497615386161924450549716272825832800324244631025157114314222855951330024164093021454629495619682561706330512701739987617461749928101676271576693918253830336491718258800455924869833076626864744090422412441631175296370078769461391361829289653105452345368919234571108260832062496151250302005071469438703443312108819621373916417710090924942518121982616342294532474396812901359532499135787540977691410078075649479852201163594291625324083602449398045241865321770201241817805121874487351333122327980625918977290669254568520850514907911605231566732675974862978705969294287586849447456148164835345677082879027339677128188411966320814981860836049501843333899463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a9ec8dbf4f35a82efbc18c6281204478026648e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f2a.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.f2a.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a1c46329100000403004730450221009b6892f4f23c31f197d0e20a0248b5642b49fec9423d82bdc9f476dab1ce4749022062e16a95033278d32b77d0acee88a6e0de6f2ac124d6f310eb39b6e84620bbd4007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a1c46329a0000040300473045022100ba129b9b9f61ac507774aeae86612a07ef92a9f3805a49d06eac51660892629a022026786cb5e1db09175981d663989cb77639b228dba75ca947164556d028bfd4d1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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