tms.airliquide.com

- AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:a3:9f:1d:ef:30:7b:6f:af:cc:e0:bb:d4:cc:fc:9a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE

Organization: AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE
Organization unit: ALIT
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a3:9f:1d:ef:30:7b:6f:af:cc:e0:bb:d4:cc:fc:9a
Serial Number (int): 2178799658495315003594181510622411930
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:3d:95:bb:aa:f5:f0:fb:d1:a7:74:1b:38:e3:8f:90:35:76:88:0d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 61:88:18:29:58:55:91:a8:2b:2c:16:04:f9:2e:3a:45:f2:9d:a4:5c
Fingerprint (sha256): 36:78:5f:4f:5a:dc:20:44:95:da:7c:6d:46:c4:ec:f7:4f:b7:3f:47:ec:e7:1e:5a:c6:5c:5d:93:5f:3d:ca:97

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate tms.airliquide.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tms.airliquide.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tms.airliquide.de
tms.airliquide.com

Other certificates including the domain name airliquide.com

(limited to 100 certificates)
industria.airliquide.it
apacmi.airliquide.com
www.airliquide.com
caps-pprd.airliquide.com
am-api-proxy.apps.airliquide.com
www.airliquide.com
AirLiquide-TokenSigning.apps.airliquide.com
myetelemetry.airliquide.com
www.cryopal.com
new.airliquide.com
connect-as.airliquide.com
datachallenges.airliquide.com
awarenet-AM01-pprd.airliquide.com
ext-procurement.airliquide.com
myinstallations.airliquide.fr
crm-ee.airliquide.com
elogbook.airliquide.com
ext-procurement.airliquide.com
webmail-na.airliquide.com
industrial.airliquide.es
be.airliquide.com
www.cryopal.com
www.airliquide.com
myairliquide.com
deveniractionnaire.airliquide.com
yorc.airliquide.com
hrmds.corp.airliquide.com
mygas-pprd.airliquide.com
www.airliquide.com
ascpprod.am.corp.airliquide.com
www.cryolor.com
fsdev.apps.airliquide.com
bos.iot.airliquide.com
myairliquide.com
www.offral.airliquide.com
cn.vpn.airliquide.com
mygas.airliquide.com
api-ww-dl-dev.apps.airliquide.com
myinstallations.airliquide.fr
adc-al-xendc2.am.corp.airliquide.com
myalt-distributors.airliquide.com
www.airliquide.com
auth.apps.airliquide.com
gideonsuat.airliquide.com
www.airliquide.com
bam.apps.airliquide.com
www.cryopal.com
e-data.airliquide.com
www.airliquide.com
futurereadydatachallenge.airliquide.com
mailhhc-pp.airliquide.com
Fabnet.Airliquide.com
myportal.airliquide.com
di-api-prod.airliquide.com
altacsweb.us.airliquide.com
e-data.airliquide.com
co-lftext-prod.apps.airliquide.com
www.cryopal.com
new.airliquide.com
connect-jp.airliquide.com
1timepass.apps.airliquide.com
gazyspozywcze.airliquide.com
ext-auth-prod.airliquide.com
kite.airliquide.com
www.cryopal.com
yorc.airliquide.com
pdt-prd.apps.airliquide.com
bomgar.apps.airliquide.com
go.airliquide.com
alair.apps.airliquide.com
distributor.airliquide.com
eworkpermit-test.airliquide.com
console-workspace.apps.airliquide.com
mygas.airliquide.com
esafety-test.airliquide.com
pprd-barpluseeuat.airliquide.com
www.airliquide.com
bomgar.apps.airliquide.com
homes-prd.apps.airliquide.com
myinstallations-dev.airliquide.com
mygas.airliquide.com
servitraxca.apps.airliquide.com
svxwebint.apps.airliquide.com
dev.bos.iot.airliquide.com
www.cryopal.com
auth-pprd.apps.airliquide.com
www.airliquide.com
kiosk.airliquide.com
cube-apac.big.airliquide.com
fleet.altomobile-pprd.airliquide.com
www.cryolor.com
sio-optim-bigateway.apps.airliquide.com
1timepass-pprd.apps.airliquide.com
oracleprod.am.corp.airliquide.com
altecstore.airliquide.com
kercomconfig-apac.preprod.bos.iot.airliquide.com
svxweb.apps.airliquide.com
air-liquide-livret2014.com
*.cms-eu-pprd.airliquide.com
de.hseonair-pprd.airliquide.com

Certificate

The complete raw certificate details for tms.airliquide.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoy/AQ17ik9+N0vjvqvs
odf8jrijwqYB7uqs79nGFpbarGJicORJOLFyFlT8MFhTnv5wThnETDaexRHNe1c/
Rc/B8DhleY06arX+7TDFcgWjFRwL7qJXcchEJ5Gu747J30ehduY9ZHX11RkCaMYo
dOXw/I7gQJI+jXU7befflLnhgVUiZKFuvos4XD4xw/St2S7H4vFVhBcWcDaQdaP5
W0d/72PDOBRbLlpVK9IF8i4UoJmOLM3MLDlQoZLb+fVKtUuqrSb5QR+76xhlliKI
vvlcL5oDRiQd3SKo/9358/TzGLv0haaQ7kwDqWK6rmYsmf8DkXic2Ws91S9GcSNS
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2178799658495315003594181510622411930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ALIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tms.airliquide.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24054682437040535963460852929266166440303939590835887996774244401533546233700143827392644581756703456754230036377753097145191005352294521803011017745379055758203485910647991266237245557894738982475230066501654180708835781903324208160887422706567912376282786071533308376425071472959921005827723057274287247972553310246969711727545307814827020741489166322157604715072393860129247059610967473388647506050221248288706986847598687852245299125808096919379007221352462736751550105690533192860269354668353922328993085720979598639361730966315895692094101967653457976404189688919614341614382433393600895086423813864039639110273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec3d95bbaaf5f0fbd1a7741b38e38f903576880d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.airliquide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms.airliquide.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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