shopping.airfrance.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:dd:02:61:08:91:0b:7b:e8:0c:96:26:0e:f9:e5:51:39 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shopping.airfrance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:dd:02:61:08:91:0b:7b:e8:0c:96:26:0e:f9:e5:51:39
Serial Number (int): 341937268128356846858860989874615343206713
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:93:66:c4:f1:ca:7e:52:b6:00:2c:46:0f:a8:f3:04:e8:e6:85:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d3:97:2f:52:a7:ba:b6:15:b1:09:d5:42:de:43:cb:ff:98:99:cd:2e
Fingerprint (sha256): 03:f7:60:bb:99:bc:f8:b0:3a:c7:62:ed:6e:57:de:04:60:af:e0:19:9c:c7:24:4b:be:d7:6d:fb:7d:e5:11:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shopping.airfrance.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shopping.airfrance.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

saf.shopping.airfrance.com
shopping.airfrance.com

Other certificates including the domain name airfrance.com

(limited to 100 certificates)
frenchtech.airfrance.com
www.quantil.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
games.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
tk.airfrance.fr
www.atanar.net
support9.cdnetworks.net
support9.cdnetworks.net
*.quantil.com
fondation.airfrance.com
www.quantil.com
projet-fondation.airfrance.com
shopping.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.klm.com
support9.cdnetworks.net
crescendo.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
tk.airfrance.fr
support9.cdnetworks.net
support9.cdnetworks.net
connect.airfrance.com
www.atanar.net
support9.cdnetworks.net
support9.cdnetworks.net
www.atanar.net
staging-assets-lapremiere.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
partenariats.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
pub-ae.airfrance.com
support9.cdnetworks.net
www.quantil.com
support9.cdnetworks.net
shopping.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
www.iseatz.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
cardpayment-rct.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
klm.com
support9.cdnetworks.net
support9.cdnetworks.net
doityourself.airfrance.com
support9.cdnetworks.net
cuba.klm.com
support9.cdnetworks.net
*.connect.airfrance.com
www.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
*.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
explorezlemonde.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
explorecostarica.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
shopping.airfrance.com
objects.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
dallas.airfrance.fr
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
frenchtech.airfrance.com
support9.cdnetworks.net

Certificate

The complete raw certificate details for shopping.airfrance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341937268128356846858860989874615343206713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 09:29:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 09:29:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shopping.airfrance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861442363855597887414411453555982681233428436966485266456794112666373295358218667122250025859919328668015059961712633734592177708611838712834467663731359004970994166188275642863463711143405765663532496443741689207460162428770621062424532188220281836479531025395107262491416101473951005653802174115115870599066574768724310046521207865562603905128142489214163231675816417205880563425626797521795372773961391171494145049015347659386994505610398359160329955593420206470135062054176506845454836233165327008156492889704962648938253909361842566509396611627055549869000457784898435216259707317596472765982224316671405209255416191740658211057381349559611880271105647151713396210177038547595114482544899229114340766990565598439390106429224656938360328850519502614608235855494636132983491186368860460678999379855953295142712577158098343850821359695399110260841256738392338902961208052517803444006850573166619678374820619580269774053773790644249564526418718987372584478657855765767936820102195057048391042205408560583153681834477442124982110484240861421697010997679751142591878732790328128722095969412522786185924268570064496400633086149066899014960058101546698003835876988775805117221877243788038907348786751415876402103291648429617676467495739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a69366c4f1ca7e52b6002c460fa8f304e8e68536
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saf.shopping.airfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.airfrance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168bd3516c200000403004630440220041bf18720d42971571e7f32cdc35d4920a55e61466e8738ad93b281e2b38c130220091587f5f8a2fb6eca78b463f53657604a300faf6ef178f567464c009d465f7d007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168bd3518b20000040300483046022100f067c0b3fb81a50d8df9f6d52725ae9260dacb9827018d6ceb66bb24c8c96fc20221008b8a28f30f75b1756a61117e93439992d7ad20830ab0395e95d6e61e169dda84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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