moncompte.lexpress.fr

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:c7:98:b8:b9:aa:8e:8f:79:66:c7:c2:b6:d6:64:b3 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=moncompte.lexpress.fr

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:c7:98:b8:b9:aa:8e:8f:79:66:c7:c2:b6:d6:64:b3
Serial Number (int): 18316328581754912153325811416631239859
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 38:db:bf:38:47:84:29:88:ef:77:33:f3:e6:5b:c2:16:21:ba:9b:30
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b0:2b:dd:19:3b:f0:5f:7b:c4:c1:32:fa:fa:a2:1c:1d:8f:a2:37:16
Fingerprint (sha256): fc:6e:5b:ec:83:54:e1:69:23:8d:4a:d5:be:84:85:16:54:53:72:a9:66:90:a7:91:25:7f:46:07:0f:56:5a:36

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate moncompte.lexpress.fr

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for moncompte.lexpress.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

moncompte.lexpress.fr
customers-admin.lexpress.fr
api-customer.lexpress.fr
api.moncompte.lexpress.fr
production.customerhappiness.cloud.ger.systems

Other certificates including the domain name lexpress.fr

(limited to 100 certificates)
aconsommerdepreference.lexpress.fr
lexpress.fr
applications-mobile.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
contrat.lentreprise.lexpress.fr
tr.news.lentreprise.lexpress.fr
*.lexpress.fr
defigrandesecoles.lexpress.fr
smartphone.lexpress.fr
zm5d.lexpress.fr
contrat.lentreprise.lexpress.fr
*.lexpress.fr
vins.lexpress.fr
api.moncompte.lexpress.fr
guideachat.lexpress.fr
tls.automattic.com
moncompte.lexpress.fr
oauth-admin.staging.abonnement.lexpress.fr
defigrandesecoles.lexpress.fr
bestmarques.lexpress.fr
tr.news.lexpansion.lexpress.fr
staging.abonnement.lexpress.fr
tr.gestion.lexpress.fr
livreblanc.lexpress.fr
event.lexpress.fr
sni.cloudflaressl.com
lexpress.fr
cours-anglais.lexpress.fr
tr.news.lentreprise.lexpress.fr
assurance-emprunteur.votreargent.lexpress.fr
support.lexpress.fr
tr.news.styles.lexpress.fr
zm5d.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
production.customerhappiness.cloud.ger.systems
guideachat.lexpress.fr
livreblanc.lexpress.fr
*.lexpress.fr
seanapse-box.com
aconsommerdepreference.lexpress.fr
smartphone.lexpress.fr
staging.webhooks.abonnement.lexpress.fr
aconsommerdepreference.lexpress.fr
abonnement.lexpress.fr
lexpress.web.arc-cdn.net
support.lexpress.fr
*.lexpress.fr
tr.news.votreargent.lexpress.fr
tr.news.styles.lexpress.fr
tr.gestion.lexpress.fr
staging.api.abonnement.lexpress.fr
zm5d.lexpress.fr
tr.welcome.lexpress.fr
aconsommerdepreference.lexpress.fr
js-pre-boutique.lexpress.fr
lexpress.web.arc-cdn.net
tr.welcome.lexpress.fr
staging.abonnement.lexpress.fr
livreblanc.lexpress.fr
sandbox.api.abonnement.lexpress.fr
zm5d.lexpress.fr
tr.news.lentreprise.lexpress.fr
abonnement.lexpress.fr
devis.votreargent.lexpress.fr
tr.news.styles.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
*.lexpress.fr
energie.votreargent.lexpress.fr
livreblanc.lexpress.fr
infos.lexpress.fr
aconsommerdepreference.lexpress.fr
event.lexpress.fr
livreblanc.lexpress.fr
tr.news.lentreprise.lexpress.fr
livreblanc.lexpress.fr
assurance-emprunteur.votreargent.lexpress.fr
tr.news.lexpress.fr
tr.welcome.lexpress.fr
boutique.lexpress.fr
*.lexpress.fr
shopping.lexpress.fr
tr.promotion.lexpress.fr
smartphone.lexpress.fr
tr.gestion.lexpress.fr
defigrandesecoles.lexpress.fr
energie.votreargent.lexpress.fr
aconsommerdepreference.lexpress.fr
*.lexpress.fr
mock.lexpress.fr
codepromo.lexpress.fr
livreblanc.lexpress.fr
support.lexpress.fr
extranet.lexpress.fr
staging.abonnement.lexpress.fr
energie.votreargent.lexpress.fr
zm5d.lexpress.fr
event.lexpress.fr

Certificate

The complete raw certificate details for moncompte.lexpress.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YlZX9pYUC/Mol52JYqG
J++LwQf1ehUpTA6Ylew3adDoQ6d47hkcmVLeB9OJZpRKEZO1fdmsu2khmBdgcBG1
y5Clh9meYyN8dImfjoDZcE6dEyYizITYl+QsJaU/KrQFS8MG+sFJsbEd0Pb1zdrJ
F2+c2DRiVEyGp/cJ4Tqq0cmyD465c8tYEU5g8voZe3+hjmma4yg6QaOmfpH0nbvV
ZW7NBXirvbBagn61Y0+qlenT7OcqXYrsSeBl0oJtlAFyDGALecu5YQSuaT4M2CeM
N3ymhCmNFczMBJShfEmInKkY1f/3eWyda0PvRFgqCL2YZ11bTh1+/AcjC+mmn7Lx
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18316328581754912153325811416631239859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'moncompte.lexpress.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27966394772311931492703347387707005451500058030917768037454490940410430507970330845879726532647890138784055543350565697416932290345173802851930544685411646907139920945445195331622389410910977685424656975398455441471869996870332200160232924865159441476928724858592662381871658988100063845950046748690501495652214398361537078375979697413879714910495706115049613868990102096003083665547743929181458599486892913584720339255938008932395325489636375718226866186639510921386589938273229848811619950511944369971309825931543056855541567946113813397157544526098963651550890752374866370606039907144207201592709872381182384206183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38dbbf3847842988ef7733f3e65bc21621ba9b30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncompte.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers-admin.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-customer.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.moncompte.lexpress.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.customerhappiness.cloud.ger.systems'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184c3aa66d50000040300483046022100aa4778653e1353e17733b20fc404128dfaad023c17bb8c44d40a5e94cb9bff1202210092a9961d3c29069489654b9e9d76ee81b0533f8aec4c46a65e538e71910633f6007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000184c3aa6731000004030046304402200af7cda2e4bb2b5b9986063be613d9452c461a606bb5660b8857a6d4eaded94202203942ea7448d5adf5d3083efaf44f96d45cc5424624c3873fac0e23f16d84c3a0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184c3aa66f00000040300473045022100b3a452bc289d75c2d638445a02c8ac70458c81d071d0d07792918a0f0b4ab385022029ddc3011e82c8a833151b253cd80ae489297e778894c5fad7e6f8a4cbe1f2c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00796228c26980ae61b1c87a4f0e9d23c23be39cbe1aa496dc5b53b6d025a884f53fdf147a7a2ccfe7bfc4d835cc39c5b2eac5b798491cf9615a3f385f37fd20bf834804deeed559ded604e32d3cf89d3def73f4375f1da8d1f98ee0bbe70d4e8012aa5912a2ecddd9d79569763ff71d4177fb3be35fd2b7082b225b1f07e7a584294af5379274965fd561fff39058c55a3fb84ee8f53602fe0aea2f9d7c500ae62da3baa12260204908f5d070794ef5a85aacc10bfbb2937d94c5e8886821c0d571625b7d86ad7611d20e3162fe8e17fcf19a5157afc8193cfb1312c3e95d7622443bb390f61229e747a28f3a8997a561ef229eed27987c830530b9efb74ffcd6