tk.airfrance.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:44:14:12:97:56:39:8f:a2:86:3c:f1:30:92:82:53:7a was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tk.airfrance.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:44:14:12:97:56:39:8f:a2:86:3c:f1:30:92:82:53:7a
Serial Number (int): 328122693438508734457899939833289969390458
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:1e:3b:ca:c4:5a:ec:55:a3:bd:2b:e0:21:1d:f8:86:7a:51:cb:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:1e:ea:c0:5a:5b:ce:28:40:07:64:3e:19:8e:58:70:14:20:5e:b1
Fingerprint (sha256): 05:5a:9d:6c:71:42:c1:18:26:01:24:ef:dc:4c:e7:bf:92:e6:73:de:c8:6d:07:b4:b3:06:a0:6f:90:44:f7:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tk.airfrance.fr

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tk.airfrance.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tk.airfrance.ae
tk.airfrance.am
tk.airfrance.at
tk.airfrance.be
tk.airfrance.bf
tk.airfrance.bg
tk.airfrance.bj
tk.airfrance.ca
tk.airfrance.cd
tk.airfrance.cg
tk.airfrance.ch
tk.airfrance.cl
tk.airfrance.cm
tk.airfrance.co.ao
tk.airfrance.co.il
tk.airfrance.co.jp
tk.airfrance.co.kr
tk.airfrance.co.th
tk.airfrance.co.uk
tk.airfrance.co.za
tk.airfrance.com
tk.airfrance.com.ar
tk.airfrance.com.au
tk.airfrance.com.br
tk.airfrance.com.cn
tk.airfrance.com.co
tk.airfrance.com.do
tk.airfrance.com.eg
tk.airfrance.com.hk
tk.airfrance.com.jo
tk.airfrance.com.kh
tk.airfrance.com.lb
tk.airfrance.com.mx
tk.airfrance.com.tr
tk.airfrance.com.tw
tk.airfrance.com.uy
tk.airfrance.cz
tk.airfrance.de
tk.airfrance.dj
tk.airfrance.dk
tk.airfrance.dz
tk.airfrance.es
tk.airfrance.fi
tk.airfrance.fr
tk.airfrance.ga
tk.airfrance.ge
tk.airfrance.gf
tk.airfrance.gp
tk.airfrance.gr
tk.airfrance.hr
tk.airfrance.ht
tk.airfrance.hu
tk.airfrance.id
tk.airfrance.ie
tk.airfrance.in
tk.airfrance.it
tk.airfrance.lu
tk.airfrance.ma
tk.airfrance.mg
tk.airfrance.ml
tk.airfrance.mq
tk.airfrance.mu
tk.airfrance.my
tk.airfrance.nc
tk.airfrance.ne
tk.airfrance.ng
tk.airfrance.nl
tk.airfrance.no
tk.airfrance.pa
tk.airfrance.pe
tk.airfrance.pf
tk.airfrance.pl
tk.airfrance.pt
tk.airfrance.re
tk.airfrance.ro
tk.airfrance.rs
tk.airfrance.ru
tk.airfrance.sa
tk.airfrance.se
tk.airfrance.sg
tk.airfrance.si
tk.airfrance.sk
tk.airfrance.sn
tk.airfrance.tg
tk.airfrance.tn
tk.airfrance.ua
tk.airfrance.us
tk.airfrance.vn

Other certificates including the domain name airfrance.fr

(limited to 100 certificates)
imperva.com
volAF447.airfrance.fr
extranet-tma.airfrance.fr
imperva.com
demandelogement.airfrance.fr
afstore.airfrance.fr
habilerct.airfrance.fr
espacemanager.airfrance.fr
petitesannonces.airfrance.fr
contratech-rct.airfrance.fr
imperva.com
portail.airfrance.fr
gp.airfrance.fr
tk.airfrance.fr
smartsuite-rct.airfrance.fr
msg-o.airfrance.fr
extranet-tma.airfrance.fr
themis.airfrance.fr
dmd-rrhcsp.airfrance.fr
frenchtech.airfrance.fr
ecm.airfrance.fr
divpnt.airfrance.fr
surpn.airfrance.fr
www.klm.com
mobilite.airfrance.fr
tk.airfrance.fr
onboarding.airfrance.fr
myitservice.airfrance.fr
qvisbcld0062.france.airfrance.fr
habile.airfrance.fr
extranet-vega.airfrance.fr
mrndocdb.airfrance.fr
imperva.com
gph.airfrance.fr
surpn.airfrance.fr
hcap-remote.airfrance.fr
portail.airfrance.fr
imperva.com
pdv2016-ps.airfrance.fr
ztnapra.airfrance.fr
msg-s.airfrance.fr
imperva.com
epicure.airfrance.fr
cmsintranet.airfrance.fr
extranet-vega.airfrance.fr
msg-t.airfrance.fr
imperva.com
af-klm.airfrance.fr
sapr3rh.airfrance.fr
autodiscover.domino.airfrance.fr
qtdssl.airfrance.fr
actualites.airfrance.fr
stats.airfrance.fr
7daystogo.airfrance.fr
qtpssl.airfrance.fr
msg-c.airfrance.fr
tlsrosfa101-siptls.airfrance.fr
servsytadin.airfrance.fr
af-vdi-le.airfrance.fr
qtcssl.airfrance.fr
demandelogement.airfrance.fr
demandelogement.airfrance.fr
spea-ccp.airfrance.fr
vculd.airfrance.fr
demandelogement.airfrance.fr
imperva.com
www.airfrance.fr
agir.airfrance.fr
agendamobilite.airfrance.fr
sms.sjc.co.za
imperva.com
stats.airfrance.fr
espacemanager.airfrance.fr
gp.airfrance.fr
dallas.airfrance.fr
blognotes.airfrance.fr
lifeslessons.ca
blogpnt.airfrance.fr
edgar.airfrance.fr
imperva.com
atgpecom.airfrance.fr
habilerct.airfrance.fr
tk.airfrance.fr
af-vdi-le.airfrance.fr
reports-dmd-csprh.airfrance.fr
obsmet.airfrance.fr
panoramah.airfrance.fr
samfm.airfrance.fr
wiki-abc380.airfrance.fr
running.airfrance.com
innovit.airfrance.fr
carte-jeune.airfrance.fr
e-audio.airfrance.fr
af-beta-test.betc.fr
*.airfrance.fr
txotx.interzonas.info
samfm-rct.airfrance.fr
surete.airfrance.fr
ciel.airfrance.fr
imperva.com

Certificate

The complete raw certificate details for tk.airfrance.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILczCCClugAwIBAgISA8REFBKXVjmPooY88TCSglN6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTkwODA3MTJaFw0y
MDA0MTgwODA3MTJaMBoxGDAWBgNVBAMTD3RrLmFpcmZyYW5jZS5mcjCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALDZTq1bNRWGbRuyI3xJrgsKtWqKjIoQ
Y0+QC+Af6n0/bZLP248SPuWPt0lnxh4tUQfBaxjCsMRfNAKVYX2LVzmAX9C0VyEM
6Z1JlP6J9VNeGSZ58Q2KZG47E6NUtEvj2Xb/v+M81ZD2Ti2BBqs1mQ4X1rBE9C0U
wGQ4no3RqD5snntSUJOmJWwTEsjCulhFiuMOfWxD6GDnU+JfZ75gu7TxXwQJ7c6B
tpS449xoNuFii8/Yyj57BtbMTBA2xjKVVG64a1hTkYU/CfLEXHfBGd04OoP/bH78
UxMbbGXnndfahfHdYW/rWxRcXMacuHyXdfyMzqoBEXS2NXCstMBCFe0CAwEAAaOC
CIEwggh9MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUBR47ysRa7FWjvSvgIR34hnpR
y0YwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCBjcGA1UdEQSCBi4wggYqgg90ay5haXJmcmFuY2UuYWWCD3RrLmFpcmZy
YW5jZS5hbYIPdGsuYWlyZnJhbmNlLmF0gg90ay5haXJmcmFuY2UuYmWCD3RrLmFp
cmZyYW5jZS5iZoIPdGsuYWlyZnJhbmNlLmJngg90ay5haXJmcmFuY2UuYmqCD3Rr
LmFpcmZyYW5jZS5jYYIPdGsuYWlyZnJhbmNlLmNkgg90ay5haXJmcmFuY2UuY2eC
D3RrLmFpcmZyYW5jZS5jaIIPdGsuYWlyZnJhbmNlLmNsgg90ay5haXJmcmFuY2Uu
Y22CEnRrLmFpcmZyYW5jZS5jby5hb4ISdGsuYWlyZnJhbmNlLmNvLmlsghJ0ay5h
aXJmcmFuY2UuY28uanCCEnRrLmFpcmZyYW5jZS5jby5rcoISdGsuYWlyZnJhbmNl
LmNvLnRoghJ0ay5haXJmcmFuY2UuY28udWuCEnRrLmFpcmZyYW5jZS5jby56YYIQ
dGsuYWlyZnJhbmNlLmNvbYITdGsuYWlyZnJhbmNlLmNvbS5hcoITdGsuYWlyZnJh
bmNlLmNvbS5hdYITdGsuYWlyZnJhbmNlLmNvbS5icoITdGsuYWlyZnJhbmNlLmNv
bS5jboITdGsuYWlyZnJhbmNlLmNvbS5jb4ITdGsuYWlyZnJhbmNlLmNvbS5kb4IT
dGsuYWlyZnJhbmNlLmNvbS5lZ4ITdGsuYWlyZnJhbmNlLmNvbS5oa4ITdGsuYWly
ZnJhbmNlLmNvbS5qb4ITdGsuYWlyZnJhbmNlLmNvbS5raIITdGsuYWlyZnJhbmNl
LmNvbS5sYoITdGsuYWlyZnJhbmNlLmNvbS5teIITdGsuYWlyZnJhbmNlLmNvbS50
coITdGsuYWlyZnJhbmNlLmNvbS50d4ITdGsuYWlyZnJhbmNlLmNvbS51eYIPdGsu
YWlyZnJhbmNlLmN6gg90ay5haXJmcmFuY2UuZGWCD3RrLmFpcmZyYW5jZS5kaoIP
dGsuYWlyZnJhbmNlLmRrgg90ay5haXJmcmFuY2UuZHqCD3RrLmFpcmZyYW5jZS5l
c4IPdGsuYWlyZnJhbmNlLmZpgg90ay5haXJmcmFuY2UuZnKCD3RrLmFpcmZyYW5j
ZS5nYYIPdGsuYWlyZnJhbmNlLmdlgg90ay5haXJmcmFuY2UuZ2aCD3RrLmFpcmZy
YW5jZS5ncIIPdGsuYWlyZnJhbmNlLmdygg90ay5haXJmcmFuY2UuaHKCD3RrLmFp
cmZyYW5jZS5odIIPdGsuYWlyZnJhbmNlLmh1gg90ay5haXJmcmFuY2UuaWSCD3Rr
LmFpcmZyYW5jZS5pZYIPdGsuYWlyZnJhbmNlLmlugg90ay5haXJmcmFuY2UuaXSC
D3RrLmFpcmZyYW5jZS5sdYIPdGsuYWlyZnJhbmNlLm1hgg90ay5haXJmcmFuY2Uu
bWeCD3RrLmFpcmZyYW5jZS5tbIIPdGsuYWlyZnJhbmNlLm1xgg90ay5haXJmcmFu
Y2UubXWCD3RrLmFpcmZyYW5jZS5teYIPdGsuYWlyZnJhbmNlLm5jgg90ay5haXJm
cmFuY2UubmWCD3RrLmFpcmZyYW5jZS5uZ4IPdGsuYWlyZnJhbmNlLm5sgg90ay5h
aXJmcmFuY2Uubm+CD3RrLmFpcmZyYW5jZS5wYYIPdGsuYWlyZnJhbmNlLnBlgg90
ay5haXJmcmFuY2UucGaCD3RrLmFpcmZyYW5jZS5wbIIPdGsuYWlyZnJhbmNlLnB0
gg90ay5haXJmcmFuY2UucmWCD3RrLmFpcmZyYW5jZS5yb4IPdGsuYWlyZnJhbmNl
LnJzgg90ay5haXJmcmFuY2UucnWCD3RrLmFpcmZyYW5jZS5zYYIPdGsuYWlyZnJh
bmNlLnNlgg90ay5haXJmcmFuY2Uuc2eCD3RrLmFpcmZyYW5jZS5zaYIPdGsuYWly
ZnJhbmNlLnNrgg90ay5haXJmcmFuY2Uuc26CD3RrLmFpcmZyYW5jZS50Z4IPdGsu
YWlyZnJhbmNlLnRugg90ay5haXJmcmFuY2UudWGCD3RrLmFpcmZyYW5jZS51c4IP
dGsuYWlyZnJhbmNlLnZuMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
AgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQ
NKawqKqOsnMAAAFvvQ5bsgAABAMARjBEAiA0zY0WTACqB+DlImJDkTnJztegrUO0
ITkZo/rAn+UsUwIgZIqEfD4b55IuYx+YqpHFaOPJxJcCG00yTwYVSnGwEJ0AdQCy
HgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW+9DluiAAAEAwBGMEQC
IANKlf51HT8YlAdloZtdg1RuFKlVGks9goZJSPa+SvKrAiBs0/JtiXtKqUjFIyBB
tmmXGWAIk1LReWad3VSJ893/3DANBgkqhkiG9w0BAQsFAAOCAQEAJC1NN9YaCdOu
jfezNLqPKTGtiODak6LQYQ6AqP9qwCbVYi8HU9exxfYuT2ovzp4Z9oaA8+3zS8Qq
l/E6luUVLnpgJMXwxsYZbHWWKSyaZLXJygn+Gt0isR1xXecv6rwLjwMHq/XHknDx
g2n4pLt0DMDT5DSVhc9iYOXddT9w8cI6VsX0DWVDY+qXHVAmhqO1mI5CmejlDl8g
w/HZM6AWBDLwlhIE5UEVMvOMS782uJwNuAFPNbWW/EhAKJmD/Z07Lo3hMsullHtx
Y76MWzg/hOuYcy+5Z8mSMEpT4Ba6j9SRthqPaJBfhmt4vl+oqDS5duZ5CAau0eLw
pG8pUlIF8w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNlOrVs1FYZtG7IjfEmu
Cwq1aoqMihBjT5AL4B/qfT9tks/bjxI+5Y+3SWfGHi1RB8FrGMKwxF80ApVhfYtX
OYBf0LRXIQzpnUmU/on1U14ZJnnxDYpkbjsTo1S0S+PZdv+/4zzVkPZOLYEGqzWZ
DhfWsET0LRTAZDiejdGoPmyee1JQk6YlbBMSyMK6WEWK4w59bEPoYOdT4l9nvmC7
tPFfBAntzoG2lLjj3Gg24WKLz9jKPnsG1sxMEDbGMpVUbrhrWFORhT8J8sRcd8EZ
3Tg6g/9sfvxTExtsZeed19qF8d1hb+tbFFxcxpy4fJd1/IzOqgERdLY1cKy0wEIV
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328122693438508734457899939833289969390458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 08:07:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 08:07:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tk.airfrance.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22325099913626368910979532237944438378137597529475483046686296911548501044709116843380197477169119372620924285813594525650327460824008929666510172248765569025784201333376581531268431959850143841814584545189721814530192630000605369017234221556460318507203477156918740945062679444645295350861411730959806611479232529533604199047090131445207536025876175554679688896154935211262403529081342002558420226829967906529807368495885592009017054129142382268925245896487044252821968061551804088381422363189189780032331285933151540316661392564936158173931157327770085108359539828375537252112907075411050485384499093872924575274477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							051e3bcac45aec55a3bd2be0211df8867a51cb46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1582 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.bf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.bj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.cd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.cg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.lb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.dj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.gf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.gp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ht'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.mg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.mq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.pf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.tg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.airfrance.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fbd0e5bb20000040300463044022034cd8d164c00aa07e0e52262439139c9ced7a0ad43b4213919a3fac09fe52c530220648a847c3e1be7922e631f98aa91c568e3c9c497021b4d324f06154a71b0109d007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fbd0e5ba200000403004630440220034a95fe751d3f18940765a19b5d83546e14a9551a4b3d82864948f6be4af2ab02206cd3f26d897b4aa948c5232041b669971960089352d179669ddd5489f3ddffdc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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