fabricacionaditiva.airliquide.es

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:3d:b5:66:c7:c8:7c:ac:d8:7d:f9:cf:55:57:6a:00:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fabricacionaditiva.airliquide.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:3d:b5:66:c7:c8:7c:ac:d8:7d:f9:cf:55:57:6a:00:00
Serial Number (int): 266523118097203323201685710809074324078592
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:6e:a1:02:09:0b:32:f4:06:d1:65:d3:24:bb:e5:24:72:4c:23:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:f6:25:79:2d:63:23:0d:a4:a0:73:9a:11:04:37:09:02:4c:3b:30
Fingerprint (sha256): 58:be:86:b0:16:5f:43:f0:3b:87:46:a7:f1:d9:b2:e9:c5:68:5e:06:ac:02:f7:47:35:14:c3:46:dd:51:e2:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fabricacionaditiva.airliquide.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fabricacionaditiva.airliquide.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fabricacionaditiva.airliquide.es

Other certificates including the domain name airliquide.es

(limited to 100 certificates)
www.airliquide.com
myinstallations.airliquide.fr
industrial.airliquide.es
industrial.airliquide.es
www.airliquide.com
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
industrial.airliquide.es
www.airliquide.com
mygas-pprd.airliquide.es
mygas-qa2.airliquide.fr
www.airliquide.com
www.airliquide.com
distributor.airliquide.com
mygas-qa1.airliquide.fr
try.airliquide.es
mixtureguide.airliquide.fr
mygas.airliquide.it
industrie.carbagas.ch
mygas-qa3.airliquide.fr
mixtureguide.airliquide.fr
mixtureguide.airliquide.fr
www.airliquide.com
mygas-pprd.airliquide.es
industrial.airliquide.es
mygas-qa2.airliquide.fr
di-pprd1.airliquide.com
distributor.airliquide.com
industrie.carbagas.ch
www.airliquide.com
myinstallations.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa1.airliquide.fr
myinstallations-pprd.airliquide.fr
mygas-pprd.airliquide.it
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
mygas-pprd.airliquide.it
myinstallations-pprd.airliquide.fr
mixtureguide.airliquide.fr
industrial.airliquide.es
www.airliquide.com
mygas.airliquide.it
industrial.airliquide.es
myinstallations-pprd.airliquide.fr
mygas-qa1.airliquide.fr
mygas-qa4.airliquide.fr
try.airliquide.es
www.airliquide.com
myinstallations-pprd.airliquide.fr
distributor.airliquide.com
fabricacionaditiva.airliquide.es
fabricacionaditiva.airliquide.es
industrial.airliquide.es
mygas.airliquide.it
mixtureguide.airliquide.fr
mygas-qa1.airliquide.fr
industrial.airliquide.es
myinstallations.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa2.airliquide.fr
www.airliquide.com
mygas.airliquide.it
mygas-qa4.airliquide.fr
myinstallations.airliquide.fr
mygas.airliquide.it
fabricacionaditiva.airliquide.es
distributor.airliquide.com
mygas-pprd.airliquide.es
fabricacionaditiva.airliquide.es
mygas-qa2.airliquide.fr
industrial.airliquide.es
mygas-pprd.airliquide.it
myinstallations-pprd.airliquide.fr
di-pprd2.airliquide.com
myinstallations.airliquide.fr
mixtureguide.airliquide.fr
fabricacionaditiva.airliquide.es
mygas-qa3.airliquide.fr
www.airliquide.com
industrial.airliquide.es
www.airliquide.com
mixtureguide.airliquide.fr
distributor.airliquide.es
mygas-qa3.airliquide.fr
mygas-aws.airliquide.com
mygas.airliquide.it
di-pprd3.airliquide.com
mygas-qa3.airliquide.fr
www.airliquide.com
industrial.airliquide.es
mixtureguide.airliquide.fr

Certificate

The complete raw certificate details for fabricacionaditiva.airliquide.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266523118097203323201685710809074324078592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 02:24:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 02:24:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fabricacionaditiva.airliquide.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881184624557276535341056834538355570368991120434344112138606434490026179251083729247180637393351702059404354750925614393786264523237129930643793476019444065351273919026683285791669564500396448970152534253327647846411699214210468164487310112016925164240243554553874382803440270341081030170680232561449871401305849855246982272554561940618676255366840935312349070136203227887792783312079521681099439664215585403489454997740976449382678118670791396884497540654874309104626752514705359572832982893442364137558600228716682488199501917894015645468325093731556635781544585103702726444792456349319314076245752285356127176113103135429753569057969395366271442706423314343704064296306176128224116204584554577922520437172673633335209278451914018480492168389579189912853681177185836656452235738096097175231124343216467203286832221077570619007920755798599705376454925026257562935614964907555182893186990084319930881689289068898365633054691900294497880976272624664786253944639397052821423373702743274062906936375361349155354520792899956555093353091458103822349676758636523863745351253421866275287341436084817123052301435431499535835184470692788039708147439033849728114117489859813612367161593314940250272373188595485420361226885875116147909241473289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b96ea102090b32f406d165d324bbe524724c2398
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabricacionaditiva.airliquide.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016da43edd9d000004030046304402205c2a40f9bc48643d79a457101b679f0e123006460500cfa8a5039f465ab7e5b602203a21eb88bb5ccf751dc06ad086c1738d0a3a102e3e193c845fc4603271bc17ee007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016da43eddc200000403004730450221009acbfd452f032cc227dced220e59a19af8f17b5733d9ec91c74a4e66f605ad2f022068c6150e9ed4674b231684a5a29b302e9c6892156af283ff79abd1d477ddd962
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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