go.airliquide.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8f:c0:44:e8:04:9b:e8:c7:fc:eb:b2:93:8d:23:78:16:96 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=go.airliquide.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:c0:44:e8:04:9b:e8:c7:fc:eb:b2:93:8d:23:78:16:96
Serial Number (int): 310252805822236216719984086582435767654038
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:b1:81:dc:2e:48:b2:09:a4:a5:31:45:3e:63:03:03:db:81:d0:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:4d:9a:a7:b2:d5:21:4a:17:9a:40:f9:63:a6:4f:d4:5e:4a:97:f0
Fingerprint (sha256): 08:d4:56:24:1c:ae:d3:5f:21:3a:2d:a0:20:1b:ed:95:46:f7:07:4c:83:3f:1d:6d:d0:02:69:89:55:ff:36:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate go.airliquide.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.airliquide.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.airliquide.com

Other certificates including the domain name airliquide.com

(limited to 100 certificates)
industria.airliquide.it
apacmi.airliquide.com
www.airliquide.com
caps-pprd.airliquide.com
am-api-proxy.apps.airliquide.com
www.airliquide.com
AirLiquide-TokenSigning.apps.airliquide.com
myetelemetry.airliquide.com
www.cryopal.com
new.airliquide.com
connect-as.airliquide.com
datachallenges.airliquide.com
awarenet-AM01-pprd.airliquide.com
ext-procurement.airliquide.com
myinstallations.airliquide.fr
crm-ee.airliquide.com
elogbook.airliquide.com
ext-procurement.airliquide.com
webmail-na.airliquide.com
industrial.airliquide.es
be.airliquide.com
www.cryopal.com
www.airliquide.com
myairliquide.com
deveniractionnaire.airliquide.com
yorc.airliquide.com
hrmds.corp.airliquide.com
mygas-pprd.airliquide.com
www.airliquide.com
ascpprod.am.corp.airliquide.com
www.cryolor.com
fsdev.apps.airliquide.com
bos.iot.airliquide.com
myairliquide.com
www.offral.airliquide.com
cn.vpn.airliquide.com
mygas.airliquide.com
api-ww-dl-dev.apps.airliquide.com
myinstallations.airliquide.fr
adc-al-xendc2.am.corp.airliquide.com
myalt-distributors.airliquide.com
www.airliquide.com
auth.apps.airliquide.com
gideonsuat.airliquide.com
www.airliquide.com
bam.apps.airliquide.com
www.cryopal.com
e-data.airliquide.com
www.airliquide.com
futurereadydatachallenge.airliquide.com
mailhhc-pp.airliquide.com
Fabnet.Airliquide.com
myportal.airliquide.com
di-api-prod.airliquide.com
altacsweb.us.airliquide.com
e-data.airliquide.com
co-lftext-prod.apps.airliquide.com
www.cryopal.com
new.airliquide.com
connect-jp.airliquide.com
1timepass.apps.airliquide.com
gazyspozywcze.airliquide.com
ext-auth-prod.airliquide.com
kite.airliquide.com
www.cryopal.com
yorc.airliquide.com
pdt-prd.apps.airliquide.com
bomgar.apps.airliquide.com
go.airliquide.com
alair.apps.airliquide.com
distributor.airliquide.com
eworkpermit-test.airliquide.com
console-workspace.apps.airliquide.com
mygas.airliquide.com
esafety-test.airliquide.com
pprd-barpluseeuat.airliquide.com
www.airliquide.com
bomgar.apps.airliquide.com
homes-prd.apps.airliquide.com
myinstallations-dev.airliquide.com
mygas.airliquide.com
servitraxca.apps.airliquide.com
svxwebint.apps.airliquide.com
dev.bos.iot.airliquide.com
www.cryopal.com
auth-pprd.apps.airliquide.com
www.airliquide.com
kiosk.airliquide.com
cube-apac.big.airliquide.com
fleet.altomobile-pprd.airliquide.com
www.cryolor.com
sio-optim-bigateway.apps.airliquide.com
1timepass-pprd.apps.airliquide.com
oracleprod.am.corp.airliquide.com
altecstore.airliquide.com
kercomconfig-apac.preprod.bos.iot.airliquide.com
svxweb.apps.airliquide.com
air-liquide-livret2014.com
*.cms-eu-pprd.airliquide.com
de.hseonair-pprd.airliquide.com

Certificate

The complete raw certificate details for go.airliquide.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310252805822236216719984086582435767654038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-26 10:45:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 10:45:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.airliquide.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778907803290513859264372388195345209326471650318589219176412457620123258566524428999987741919632290880012830767101264434475094538696571611213647741170025801669740699429343020913318866192292574004512452408165939941739640030864474826424220318713421330448150429775490996915134944721552520100545514479818649782928884652157835687228223306765394067837720043706715064860134076582239974703715120204605895445236148175559014276617404661030851865514680429816665305498960150010514990336237983720872393064515066850111147496527583238450096278018156221976226578382307090356088233522494896884241985780332161568694461523263440120774152094231319114934071276397458097763731322297075292489585922526504915726088802048963942226240106475693439734998342329956989399784991891180093844858478893886580743350498064177794612213179286990169714024116457884086765946918596007885774461982467422502532640249007206820734871201950825832641889971712326229989902181853767152881867079801126617303552595517055480625081859966853281633407297150136962422648045843428926418690340951421616525260832924405391442692608127040479061912848560034709288783745007682198286056386550367700541174987969852350451463193075804523889948272279708384034344998039195168448329207533552636717153851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88b181dc2e48b209a4a531453e630303db81d0c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.airliquide.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016889fa6f0e0000040300473045022100877775b64ab09528d15364b9a5c0b568a9f6493d80af2debc884b1bf08f4ffa0022032529f19a79a9e9677e838c680ae8fc1118e6536570c7dc0ee1ac08399c3544d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016889fa6f130000040300473045022100cace17770f7dc30a933fba028740e7bfc3dd7c1f9750f4a1f554fbc09191706d02202f6ae4be6cf5482f9d8b23ea9ef371f9f65e93b607d5813a5c8c76e295194679
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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