try.airliquide.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9e:bc:c3:3a:40:d3:89:92:78:94:97:c2:38:8b:e9:ec:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=try.airliquide.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:bc:c3:3a:40:d3:89:92:78:94:97:c2:38:8b:e9:ec:e7
Serial Number (int): 402464666243160069353511481395092744957159
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 12:4f:cc:f1:47:bf:9f:72:da:5a:00:79:ce:e2:0a:54:bb:18:85:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:1f:b5:f7:4a:2e:d4:d0:43:01:27:5e:0d:c4:ef:63:45:a4:05:e0
Fingerprint (sha256): 71:37:af:cd:59:0d:84:ce:f5:0d:31:d6:57:ed:59:84:b9:4f:5d:1d:11:07:2f:dd:a4:e7:0f:00:89:3d:84:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate try.airliquide.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for try.airliquide.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

try.airliquide.it

Other certificates including the domain name airliquide.it

(limited to 100 certificates)
industria.airliquide.it
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
try.airliquide.it
mygas-qa2.airliquide.fr
www.airliquide.com
www.airliquide.com
distributor.airliquide.com
mygas-qa1.airliquide.fr
mixtureguide.airliquide.fr
mygas.airliquide.it
industria.airliquide.it
industria.airliquide.it
mygas-qa3.airliquide.fr
mixtureguide.airliquide.fr
mixtureguide.airliquide.fr
www.airliquide.com
mygas-qa2.airliquide.fr
distributor.airliquide.com
industria.airliquide.it
distributor.airliquide.it
try.airliquide.it
www.airliquide.com
myinstallations.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa1.airliquide.fr
myinstallations-pprd.airliquide.fr
mygas-pprd.airliquide.it
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
mygas-pprd.airliquide.it
myinstallations-pprd.airliquide.fr
mixtureguide.airliquide.fr
www.airliquide.com
mygas.airliquide.it
try.airliquide.it
myinstallations-pprd.airliquide.fr
mygas-qa1.airliquide.fr
mygas-qa4.airliquide.fr
www.airliquide.com
myinstallations-pprd.airliquide.fr
distributor.airliquide.com
mygas.airliquide.it
mixtureguide.airliquide.fr
industria.airliquide.it
mygas-qa1.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa2.airliquide.fr
www.airliquide.com
mygas.airliquide.it
mygas-qa4.airliquide.fr
industria.airliquide.it
try.airliquide.it
myinstallations.airliquide.fr
industria.airliquide.it
mygas.airliquide.it
distributor.airliquide.com
mygas-qa2.airliquide.fr
industria.airliquide.it
mygas-pprd.airliquide.it
myinstallations-pprd.airliquide.fr
myinstallations.airliquide.fr
mixtureguide.airliquide.fr
mygas-qa3.airliquide.fr
www.airliquide.com
try.airliquide.it
www.airliquide.com
industria.airliquide.it
mixtureguide.airliquide.fr
mygas-qa3.airliquide.fr
mygas-aws.airliquide.com
industri.airliquide.dk
mygas.airliquide.it
try.airliquide.it
mygas-qa3.airliquide.fr
www.airliquide.com
mixtureguide.airliquide.fr
mixtureguide.airliquide.fr
distributor.airliquide.com
try.airliquide.it
www.airliquide.com
industria.airliquide.it
myinstallations.airliquide.fr
www.airliquide.com
mygas-pprd.airliquide.it
www.airliquide.com
try.airliquide.it

Certificate

The complete raw certificate details for try.airliquide.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402464666243160069353511481395092744957159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 00:11:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 00:11:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'try.airliquide.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760261199882248850860809048377001852125464379926692924943252159025347022480461091001175251142747245539350774665874206093845721483779413576523306832628927665308645307368325925636613779604740198519628876540932983998421665306273698708875216838099413105635697072616210017392317406198829480496785249459886673825730216813935699181500901559848910702070304329242057792723377957360242653230669705900415375101922887487675571785741338778838761189392621176710909328344232924819018280954288053154427175886283063025953713767017444984347700527304636568627325732058843789809264932315934732801418223490934364943071864418561386014476366994561988651386463922954949464349863292915228754910926756758734251496293260409622454829970533089779881348486223373894479482376418560960532857804808776663685193155315761480917952443370079584643585344031329679408921188264085492763757577500812380469881412712085321445166034589127410333839328521170995137410806691775967315358378843590489825587185395425702272517924554497116492870540434082345757978081459187356274427489818038365275769555031496159986266612312778787359596591985886700122755065320766458212659390248562902220056151840926051230580070458518694221623198430527062606020748549856455262983463791036306462880948141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							124fccf147bf9f72da5a0079cee20a54bb18858f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.airliquide.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001677bebd88000000403004730450220425ca4f73e8e742558525286523f06974d25391b89f4ba194d45f4b03cc17ca5022100b2b3959208f218dac3d29f9521e14fe1c546ce8d160b0649159d5b827f69b3cd007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001677bebda730000040300483046022100efce95e71c35a0171609e677c2b05f86c6d05aecc01e0c1913ada3d7331868eb022100aa4bad2deb5bb238a5cfce20240a961b731785fe55ecbe7384bc4b7b083644d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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