defense-lyon.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:b6:1a:8f:36:a0:3f:e8:7e:e0:ab:ab:82:b3:46:1a:91 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=defense-lyon.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:b6:1a:8f:36:a0:3f:e8:7e:e0:ab:ab:82:b3:46:1a:91
Serial Number (int): 287440375080935728717261702138338679855761
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:d6:72:67:6a:5b:dc:c5:e4:83:26:c0:6b:46:ab:e4:cb:d9:fe:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 35:f3:d2:d6:50:35:42:27:fc:1c:91:7c:06:f9:37:b3:85:af:c3:8b
Fingerprint (sha256): f1:12:66:11:e7:5b:74:bd:ef:3f:d2:6a:d1:e9:b2:e0:08:87:59:20:78:6d:2e:0f:09:d9:18:67:e9:36:07:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate defense-lyon.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for defense-lyon.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

defense-lyon.fr
www.concert-du-gouverneur.org
www.defense-lyon.fr

Other certificates including the domain name defense-lyon.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for defense-lyon.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyC7AHeT0nBZ5OzarUt1Q
yB7ltsB5Ot7Xs2+7SjwxuHKvRAYBW+6UPG2zve9qqNN+mf4XSDg6mrY/rwlcpWLU
Vph0T7W/HdG7i2fm+ZFXa0mKBJ4mDYf1zu/as8H/0P9phdPUKV4D1dApM259a8vB
HeMLn3aP21ZaLrBigJcaYD/PHFuhI5ql9SFC1zihWOWeO6kdS43vd71t1kkTAgpT
+rUeJorvOltbu1XNn2gPWKaABnA61h34vVsFjPeM4YMNyOHVP8XCme4Hw3CVygKB
+0hvENtjHhpig/ge1LlUAJvRbNW7rXc772dczUm0avwUVTWFceKxlm9sCQrvHUwn
gpBvSXmsYfo21koVwoS1ZmCbwYp0i1Z9tWvBdbJdri687kn9yjuLM7RnVuFKCXBJ
HxsDGIFdSS50J4gLpRv3tE48/mGvdueCXejuKdblkZxrqrPGmx/Fh/cQrKEEn7uO
RUcEtnyLWWklF55Gs046G9MNQi6Tx8VnjNC+N6EhPyuHGyCOtknWoooHnCU2WS36
YYTfTPiv6+z0e1A7z62fca7iL7KShfCa7EqRidIL8nRspt5IXdhIBBf0ctAJ3Z2A
pCirAhJMMrUXDcbzVjwWlelbzQrjdSt6C6yfsjRKssHn2BxucaiBJZsxB58nIWEa
PAFNKTORFxSFe6S+5ruYOC0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287440375080935728717261702138338679855761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-15 22:39:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-13 22:39:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'defense-lyon.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816673833999011705832316935882749364267156508052640286434407539563741596725245368453686285346633194833976974649111731531582528221813618415542660242301975251055538198910197972830141939431563255853256127095387765092422670193854782013658060877192939279526782967976965664057457517382439170322903507876931487736640534492030358950586409673759889003064168841466306755417114585660304314332323297289074959438436229879821129070146225225105289400576304683028657189128044145958630045241505965802814079093606559375609973804975047667845605138640227333816567446706766575483949519868099287855608395142901959424340772662070360803360881918127251342650717643067381787437415168542652311903056763299870737438118933631577403278991977315484530614636372739747072332804926016573049211745752781529581785538421371762166021599886267462042240453558005738717054148615648327223979437785755300623234596502056976729961288318375156813891735403504801962851203758661899537923214833137287997692135244313198244360215526541416220069372730401049224420038970208592813561918233613670946089330251234537640350848358572010172876830650036046535475166860968385377457502165387588302920578047095688074956282360428213824218440282711745291339666685693959282142145135014043820416841773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5d672676a5bdcc5e48326c06b46abe4cbd9fe39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defense-lyon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concert-du-gouverneur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defense-lyon.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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