try.airliquide.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a4:62:c9:cc:ce:a6:a6:96:7d:d9:18:7c:82:2a:81:a4:04 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=try.airliquide.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a4:62:c9:cc:ce:a6:a6:96:7d:d9:18:7c:82:2a:81:a4:04
Serial Number (int): 404386764051314518377259019519835561370628
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:15:89:9f:07:f8:a9:85:a3:8c:01:0e:17:ce:f8:e7:b8:fd:d5:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:15:ce:c3:2c:e9:d7:19:28:82:1b:85:08:b6:8c:ea:8a:46:a0:96
Fingerprint (sha256): 8a:0f:0e:79:60:a9:d1:20:30:72:4b:f9:23:fc:58:9b:03:68:4f:55:f9:92:83:a5:13:19:d4:f7:b4:89:45:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate try.airliquide.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for try.airliquide.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

try.airliquide.it

Other certificates including the domain name airliquide.it

(limited to 100 certificates)
industria.airliquide.it
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
try.airliquide.it
mygas-qa2.airliquide.fr
www.airliquide.com
www.airliquide.com
distributor.airliquide.com
mygas-qa1.airliquide.fr
mixtureguide.airliquide.fr
mygas.airliquide.it
industria.airliquide.it
industria.airliquide.it
mygas-qa3.airliquide.fr
mixtureguide.airliquide.fr
mixtureguide.airliquide.fr
www.airliquide.com
mygas-qa2.airliquide.fr
distributor.airliquide.com
industria.airliquide.it
distributor.airliquide.it
try.airliquide.it
www.airliquide.com
myinstallations.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa1.airliquide.fr
myinstallations-pprd.airliquide.fr
mygas-pprd.airliquide.it
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
mygas-pprd.airliquide.it
myinstallations-pprd.airliquide.fr
mixtureguide.airliquide.fr
www.airliquide.com
mygas.airliquide.it
try.airliquide.it
myinstallations-pprd.airliquide.fr
mygas-qa1.airliquide.fr
mygas-qa4.airliquide.fr
www.airliquide.com
myinstallations-pprd.airliquide.fr
distributor.airliquide.com
mygas.airliquide.it
mixtureguide.airliquide.fr
industria.airliquide.it
mygas-qa1.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa2.airliquide.fr
www.airliquide.com
mygas.airliquide.it
mygas-qa4.airliquide.fr
industria.airliquide.it
try.airliquide.it
myinstallations.airliquide.fr
industria.airliquide.it
mygas.airliquide.it
distributor.airliquide.com
mygas-qa2.airliquide.fr
industria.airliquide.it
mygas-pprd.airliquide.it
myinstallations-pprd.airliquide.fr
myinstallations.airliquide.fr
mixtureguide.airliquide.fr
mygas-qa3.airliquide.fr
www.airliquide.com
try.airliquide.it
www.airliquide.com
industria.airliquide.it
mixtureguide.airliquide.fr
mygas-qa3.airliquide.fr
mygas-aws.airliquide.com
industri.airliquide.dk
mygas.airliquide.it
try.airliquide.it
mygas-qa3.airliquide.fr
www.airliquide.com
mixtureguide.airliquide.fr
mixtureguide.airliquide.fr
distributor.airliquide.com
try.airliquide.it
www.airliquide.com
industria.airliquide.it
myinstallations.airliquide.fr
www.airliquide.com
mygas-pprd.airliquide.it
www.airliquide.com
try.airliquide.it

Certificate

The complete raw certificate details for try.airliquide.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404386764051314518377259019519835561370628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-07 02:05:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-05 02:05:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'try.airliquide.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 614570534380869201678785823594771553572086324894222598351274784386924410225415969965242011176829376891743996468127382301381306968269784249725873652470066192124385954936073454911678619135049199673643946997931220007441252535759412367852162747733855303349506641011283097716520034598003575822578875391161878572998073153474812813082757718841220663018888077376707215714914477445007779793274990264801709216194457148091308512143173507116179401092909959816541665724286231804692506361273900679583678699645235195672097661514729628788689659281234396025018644424300871818532017810573127311784153413087479681471803279001139835805651619533542179619468318642665801568463286669031423219623146724443026540369975815436943677051223000043375691479548909923006526062455985409156772306592092719820118610444868494557743509569484700631108845209429409856940562392444286678913745216748116205907740024565631161286327557553183690957661296700140693008406584724220893659026604645919845865472422059462453038289353233781997381896873290159222443542980271161692079671948142082961480559129708193712057771557052057193968608548001506769877667047002202484654044485485463741895418199050408728192820196383791392273562563904033613275262820668398624231087889201590977049558149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b15899f07f8a985a38c010e17cef8e7b8fdd559
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.airliquide.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a9040ff0d0000040300483046022100c74f112c2b5b3f64ef79cab290123de47ef1fa9b023b8165e1fc557a026f750c022100a6aa06347a6a193a9292870e488f542a52ca6d3223aa8607559ebd4e4b0ed3b900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a9040ff16000004030047304502205187afc39396f9bb75683a836262b7aadf1cc22b2771720fa7252438d4f31f320221008ef0f914f86575b3a58a211812dc7fd7a1e195476154c5b983a3c18f8c92b66e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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