tk.airfrance.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:20:e1:fc:15:4b:b7:24:10:56:f6:7b:ae:10:c5:b0:78:15 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tk.airfrance.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:e1:fc:15:4b:b7:24:10:56:f6:7b:ae:10:c5:b0:78:15
Serial Number (int): 272526278726540120839209193412883477723157
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:4e:4a:7e:35:b1:ba:cf:d5:54:3c:88:dc:2b:68:6c:42:f2:dc:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:68:75:8a:23:c8:d6:9d:39:07:53:61:59:56:ac:ff:c7:75:a5:ee
Fingerprint (sha256): 02:71:8e:7b:8f:46:45:c1:61:4b:b0:3e:0f:d7:3c:ff:ba:e7:46:1d:79:de:9f:9c:4a:38:3d:46:ff:0f:0f:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tk.airfrance.fr

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tk.airfrance.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tk.airfrance.ae
tk.airfrance.am
tk.airfrance.at
tk.airfrance.be
tk.airfrance.bf
tk.airfrance.bg
tk.airfrance.bj
tk.airfrance.ca
tk.airfrance.cd
tk.airfrance.cg
tk.airfrance.ch
tk.airfrance.cl
tk.airfrance.cm
tk.airfrance.co.ao
tk.airfrance.co.il
tk.airfrance.co.jp
tk.airfrance.co.kr
tk.airfrance.co.th
tk.airfrance.co.uk
tk.airfrance.co.za
tk.airfrance.com
tk.airfrance.com.ar
tk.airfrance.com.au
tk.airfrance.com.br
tk.airfrance.com.cn
tk.airfrance.com.co
tk.airfrance.com.do
tk.airfrance.com.eg
tk.airfrance.com.hk
tk.airfrance.com.jo
tk.airfrance.com.kh
tk.airfrance.com.lb
tk.airfrance.com.mx
tk.airfrance.com.tr
tk.airfrance.com.tw
tk.airfrance.com.uy
tk.airfrance.cz
tk.airfrance.de
tk.airfrance.dj
tk.airfrance.dk
tk.airfrance.dz
tk.airfrance.es
tk.airfrance.fi
tk.airfrance.fr
tk.airfrance.ga
tk.airfrance.ge
tk.airfrance.gf
tk.airfrance.gp
tk.airfrance.gr
tk.airfrance.hr
tk.airfrance.ht
tk.airfrance.hu
tk.airfrance.id
tk.airfrance.ie
tk.airfrance.in
tk.airfrance.it
tk.airfrance.lu
tk.airfrance.ma
tk.airfrance.mg
tk.airfrance.ml
tk.airfrance.mq
tk.airfrance.mu
tk.airfrance.my
tk.airfrance.nc
tk.airfrance.ne
tk.airfrance.ng
tk.airfrance.nl
tk.airfrance.no
tk.airfrance.pa
tk.airfrance.pe
tk.airfrance.pf
tk.airfrance.pl
tk.airfrance.pt
tk.airfrance.re
tk.airfrance.ro
tk.airfrance.rs
tk.airfrance.ru
tk.airfrance.sa
tk.airfrance.se
tk.airfrance.sg
tk.airfrance.si
tk.airfrance.sk
tk.airfrance.sn
tk.airfrance.tg
tk.airfrance.tn
tk.airfrance.ua
tk.airfrance.us
tk.airfrance.vn

Other certificates including the domain name airfrance.fr

(limited to 100 certificates)
imperva.com
volAF447.airfrance.fr
extranet-tma.airfrance.fr
imperva.com
demandelogement.airfrance.fr
afstore.airfrance.fr
habilerct.airfrance.fr
espacemanager.airfrance.fr
petitesannonces.airfrance.fr
contratech-rct.airfrance.fr
imperva.com
portail.airfrance.fr
gp.airfrance.fr
tk.airfrance.fr
smartsuite-rct.airfrance.fr
msg-o.airfrance.fr
extranet-tma.airfrance.fr
themis.airfrance.fr
dmd-rrhcsp.airfrance.fr
frenchtech.airfrance.fr
ecm.airfrance.fr
divpnt.airfrance.fr
surpn.airfrance.fr
www.klm.com
mobilite.airfrance.fr
tk.airfrance.fr
onboarding.airfrance.fr
myitservice.airfrance.fr
qvisbcld0062.france.airfrance.fr
habile.airfrance.fr
extranet-vega.airfrance.fr
mrndocdb.airfrance.fr
imperva.com
gph.airfrance.fr
surpn.airfrance.fr
hcap-remote.airfrance.fr
portail.airfrance.fr
imperva.com
pdv2016-ps.airfrance.fr
ztnapra.airfrance.fr
msg-s.airfrance.fr
imperva.com
epicure.airfrance.fr
cmsintranet.airfrance.fr
extranet-vega.airfrance.fr
msg-t.airfrance.fr
imperva.com
af-klm.airfrance.fr
sapr3rh.airfrance.fr
autodiscover.domino.airfrance.fr
qtdssl.airfrance.fr
actualites.airfrance.fr
stats.airfrance.fr
7daystogo.airfrance.fr
qtpssl.airfrance.fr
msg-c.airfrance.fr
tlsrosfa101-siptls.airfrance.fr
servsytadin.airfrance.fr
af-vdi-le.airfrance.fr
qtcssl.airfrance.fr
demandelogement.airfrance.fr
demandelogement.airfrance.fr
spea-ccp.airfrance.fr
vculd.airfrance.fr
demandelogement.airfrance.fr
imperva.com
www.airfrance.fr
agir.airfrance.fr
agendamobilite.airfrance.fr
sms.sjc.co.za
imperva.com
stats.airfrance.fr
espacemanager.airfrance.fr
gp.airfrance.fr
dallas.airfrance.fr
blognotes.airfrance.fr
lifeslessons.ca
blogpnt.airfrance.fr
edgar.airfrance.fr
imperva.com
atgpecom.airfrance.fr
habilerct.airfrance.fr
tk.airfrance.fr
af-vdi-le.airfrance.fr
reports-dmd-csprh.airfrance.fr
obsmet.airfrance.fr
panoramah.airfrance.fr
samfm.airfrance.fr
wiki-abc380.airfrance.fr
running.airfrance.com
innovit.airfrance.fr
carte-jeune.airfrance.fr
e-audio.airfrance.fr
af-beta-test.betc.fr
*.airfrance.fr
txotx.interzonas.info
samfm-rct.airfrance.fr
surete.airfrance.fr
ciel.airfrance.fr
imperva.com

Certificate

The complete raw certificate details for tk.airfrance.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILdTCCCl2gAwIBAgISAyDh/BVLtyQQVvZ7rhDFsHgVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTkwODE2NTlaFw0y
MDA2MTcwODE2NTlaMBoxGDAWBgNVBAMTD3RrLmFpcmZyYW5jZS5mcjCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAK45ZhbWKLzPaacsuGGeSyTpDoWbqa1j
CLO53AHjX7Zxo8SfnyQ7AbutwnMSXX7GTaVYJh4rV5svVyFfvJU1pdlHdqACmLQ6
hxT9Le231iHyOZmq1WpYH5N1TOxk+4n/jv0HAZ7+mTGOmZtooSlBK3CDADtaNKqd
I8c5q9UWKSNXoMizxdk5uaDgAUcHnfyfRoeszmPuapwzahxfVL6rKCR0OgqMO+jr
yeWbquDk4dkfmJjXuON0yw4nv6JvtsHy4kHUX7PF2zHvwxcMyXehAg/hDT2mBww+
uIuWjc/wqne9OvSD6Nk9etvuHo1A6IlzPln9B/rQB1HRXNbWmorvvI8CAwEAAaOC
CIMwggh/MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUXU5KfjWxus/VVDyI3CtobELy
3KEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCBjcGA1UdEQSCBi4wggYqgg90ay5haXJmcmFuY2UuYWWCD3RrLmFpcmZy
YW5jZS5hbYIPdGsuYWlyZnJhbmNlLmF0gg90ay5haXJmcmFuY2UuYmWCD3RrLmFp
cmZyYW5jZS5iZoIPdGsuYWlyZnJhbmNlLmJngg90ay5haXJmcmFuY2UuYmqCD3Rr
LmFpcmZyYW5jZS5jYYIPdGsuYWlyZnJhbmNlLmNkgg90ay5haXJmcmFuY2UuY2eC
D3RrLmFpcmZyYW5jZS5jaIIPdGsuYWlyZnJhbmNlLmNsgg90ay5haXJmcmFuY2Uu
Y22CEnRrLmFpcmZyYW5jZS5jby5hb4ISdGsuYWlyZnJhbmNlLmNvLmlsghJ0ay5h
aXJmcmFuY2UuY28uanCCEnRrLmFpcmZyYW5jZS5jby5rcoISdGsuYWlyZnJhbmNl
LmNvLnRoghJ0ay5haXJmcmFuY2UuY28udWuCEnRrLmFpcmZyYW5jZS5jby56YYIQ
dGsuYWlyZnJhbmNlLmNvbYITdGsuYWlyZnJhbmNlLmNvbS5hcoITdGsuYWlyZnJh
bmNlLmNvbS5hdYITdGsuYWlyZnJhbmNlLmNvbS5icoITdGsuYWlyZnJhbmNlLmNv
bS5jboITdGsuYWlyZnJhbmNlLmNvbS5jb4ITdGsuYWlyZnJhbmNlLmNvbS5kb4IT
dGsuYWlyZnJhbmNlLmNvbS5lZ4ITdGsuYWlyZnJhbmNlLmNvbS5oa4ITdGsuYWly
ZnJhbmNlLmNvbS5qb4ITdGsuYWlyZnJhbmNlLmNvbS5raIITdGsuYWlyZnJhbmNl
LmNvbS5sYoITdGsuYWlyZnJhbmNlLmNvbS5teIITdGsuYWlyZnJhbmNlLmNvbS50
coITdGsuYWlyZnJhbmNlLmNvbS50d4ITdGsuYWlyZnJhbmNlLmNvbS51eYIPdGsu
YWlyZnJhbmNlLmN6gg90ay5haXJmcmFuY2UuZGWCD3RrLmFpcmZyYW5jZS5kaoIP
dGsuYWlyZnJhbmNlLmRrgg90ay5haXJmcmFuY2UuZHqCD3RrLmFpcmZyYW5jZS5l
c4IPdGsuYWlyZnJhbmNlLmZpgg90ay5haXJmcmFuY2UuZnKCD3RrLmFpcmZyYW5j
ZS5nYYIPdGsuYWlyZnJhbmNlLmdlgg90ay5haXJmcmFuY2UuZ2aCD3RrLmFpcmZy
YW5jZS5ncIIPdGsuYWlyZnJhbmNlLmdygg90ay5haXJmcmFuY2UuaHKCD3RrLmFp
cmZyYW5jZS5odIIPdGsuYWlyZnJhbmNlLmh1gg90ay5haXJmcmFuY2UuaWSCD3Rr
LmFpcmZyYW5jZS5pZYIPdGsuYWlyZnJhbmNlLmlugg90ay5haXJmcmFuY2UuaXSC
D3RrLmFpcmZyYW5jZS5sdYIPdGsuYWlyZnJhbmNlLm1hgg90ay5haXJmcmFuY2Uu
bWeCD3RrLmFpcmZyYW5jZS5tbIIPdGsuYWlyZnJhbmNlLm1xgg90ay5haXJmcmFu
Y2UubXWCD3RrLmFpcmZyYW5jZS5teYIPdGsuYWlyZnJhbmNlLm5jgg90ay5haXJm
cmFuY2UubmWCD3RrLmFpcmZyYW5jZS5uZ4IPdGsuYWlyZnJhbmNlLm5sgg90ay5h
aXJmcmFuY2Uubm+CD3RrLmFpcmZyYW5jZS5wYYIPdGsuYWlyZnJhbmNlLnBlgg90
ay5haXJmcmFuY2UucGaCD3RrLmFpcmZyYW5jZS5wbIIPdGsuYWlyZnJhbmNlLnB0
gg90ay5haXJmcmFuY2UucmWCD3RrLmFpcmZyYW5jZS5yb4IPdGsuYWlyZnJhbmNl
LnJzgg90ay5haXJmcmFuY2UucnWCD3RrLmFpcmZyYW5jZS5zYYIPdGsuYWlyZnJh
bmNlLnNlgg90ay5haXJmcmFuY2Uuc2eCD3RrLmFpcmZyYW5jZS5zaYIPdGsuYWly
ZnJhbmNlLnNrgg90ay5haXJmcmFuY2Uuc26CD3RrLmFpcmZyYW5jZS50Z4IPdGsu
YWlyZnJhbmNlLnRugg90ay5haXJmcmFuY2UudWGCD3RrLmFpcmZyYW5jZS51c4IP
dGsuYWlyZnJhbmNlLnZuMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp
Bo2yCJo32RMAAAFw8hTh1AAABAMARjBEAiBtaeid89DhvPCVdvI1oxnrOuF2XX9M
xqCrHOjS5n6WZgIgIxuPIp8A8D2jZJmnqkfPyeid+d0GJiNVK0hGiMsN35MAdwCy
HgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXDyFOPSAAAEAwBIMEYC
IQCVBMUBGWSQcEQjzmE/Vo+5xBnhL78gHt1ZKZ81am2s/wIhAIGgg6sc5z5EXBUL
OMSrr+A4ORLUL0TNCnXHlZl8l30oMA0GCSqGSIb3DQEBCwUAA4IBAQBR5RW9kdPj
8YPC6H9nsfEBmxeYiXg3s5tvmTDEkZ2zRAySVboMFa+yBfczz+b2pJ7c/y7aCDAz
RFx+FGxJ7nE0XIwwNhlG8tkdG8o3tEQTzMfNGgb1TVi8ROgEhLeE4tNHX45B7XLu
2DE92KhblgekqJC/q8oCsybSGxyp2U1t8l6sTa8CbFgatANerxZwd7Q2P6zBfWS6
J49UjhCuE6uF0P80QprGnYli5WScRDIRrlSoF0NCJ7HabE+i9Nfrn1D+byENw7H8
OUJ49f1CUlt0NtP6aBVvaEbeTMoTyZyslPXrOHfmoI89VRsMQSpjtTxck/H99JVd
CDzY+vYAv42S
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjlmFtYovM9ppyy4YZ5L
JOkOhZuprWMIs7ncAeNftnGjxJ+fJDsBu63CcxJdfsZNpVgmHitXmy9XIV+8lTWl
2Ud2oAKYtDqHFP0t7bfWIfI5marValgfk3VM7GT7if+O/QcBnv6ZMY6Zm2ihKUEr
cIMAO1o0qp0jxzmr1RYpI1egyLPF2Tm5oOABRwed/J9Gh6zOY+5qnDNqHF9Uvqso
JHQ6Cow76OvJ5Zuq4OTh2R+YmNe443TLDie/om+2wfLiQdRfs8XbMe/DFwzJd6EC
D+ENPaYHDD64i5aNz/Cqd7069IPo2T162+4ejUDoiXM+Wf0H+tAHUdFc1taaiu+8
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272526278726540120839209193412883477723157
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 08:16:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 08:16:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tk.airfrance.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21993769460369503440635864780193851902480266312033875134547002038116934778557459354266676694447406844124812943063168851299560039782121257908634441051983378755676572614366075159509183443435637862751873389605692455112862693139710236674486353752999769865371015328212272900455057800019684127944703919761047340769423601431264486198348963392673126738911154741366318800198662924880643905547149554877031411910000292707525290054350431971385332324770962753742705506982106475144004155526737654902039324262373116783545332403630430538030935827415479889701478507575904064550228311525994804873239608306547153054452891353532058287247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d4e4a7e35b1bacfd5543c88dc2b686c42f2dca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1582 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.bf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.bj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.cd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.cg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.lb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.dj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.gf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.gp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ht'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.mg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.mq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.pf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.tg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170f214e1d4000004030046304402206d69e89df3d0e1bcf09576f235a319eb3ae1765d7f4cc6a0ab1ce8d2e67e96660220231b8f229f00f03da36499a7aa47cfc9e89df9dd062623552b484688cb0ddf93007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170f214e3d200000403004830460221009504c501196490704423ce613f568fb9c419e12fbf201edd59299f356a6dacff02210081a083ab1ce73e445c150b38c4abafe0383912d42f44cd0a75c795997c977d28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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