customer.stg.eca.fcl.cloud

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:e4:53:3d:f5:96:21:ab:47:37:df:95:49:48:f9:f4 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=customer.stg.eca.fcl.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:e4:53:3d:f5:96:21:ab:47:37:df:95:49:48:f9:f4
Serial Number (int): 17136267982085272909711142363551300084
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4c:5d:af:ea:48:0a:9b:35:33:d5:bd:0f:49:d2:61:e2:0c:61:78:0d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 26:97:91:bb:d0:ae:0c:f4:67:98:b2:9c:40:3c:bd:1e:42:e2:22:5a
Fingerprint (sha256): 00:0b:f2:e9:19:53:1d:4c:64:18:a4:0b:5e:00:1e:ac:0a:c9:b8:09:df:b0:4a:d9:ac:54:f5:2f:cf:38:04:db

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate customer.stg.eca.fcl.cloud

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customer.stg.eca.fcl.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

customer.stg.eca.fcl.cloud
stg-securepay.travelassociates.com
uk-customer.stg.eca.fcl.cloud
stg-securepay.flightcentre.co.za
stg-securepay.cruiseabout.com.au
stg-securepay.flightcentre.co.uk
stg-securepay.flightcentre.com.au

Other certificates including the domain name fcl.cloud

(limited to 100 certificates)
customer.stg.eca.fcl.cloud
*.prd.detokenisation.fcl.cloud
5649648836411392-fe3.pantheonsite.io
*.cert.sabre.fcl.cloud
5649648836411392-fe3.pantheonsite.io
5649648836411392-fe3.pantheonsite.io
5649648836411392-fe3.pantheonsite.io
acquiadev.flitech.net
acquiatest.flitech.net
5649648836411392-fe3.pantheonsite.io
*.services.fcl.cloud
*.prd.retail.fcl.cloud
5649648836411392-fe3.pantheonsite.io
*.dev-tools.fctg-digital-booking-non-production.fcl.cloud
*.dev.tmoz.fcl.cloud
*.prd.scv.fcl.cloud
acquiaprod.flitech.net
acquiatestau.flitech.net
acquiadev.flitech.net
5649648836411392-fe3.pantheonsite.io
*.stg-shared-services.fcl.cloud
*.prd.soar.fcl.cloud
*.fctg-digital-test.fcl.cloud
*.develop.soar.fcl.cloud
acquiaprod.flitech.net
5649648836411392-fe3.pantheonsite.io
acquiaprod.flitech.net
stg-consultant-afd.stg.tmoz.fcl.cloud
acquiadev.flitech.net
*.prd.globalscv.fcl.cloud
acquiaprod.flitech.net
*.non-prd.eca.fcl.cloud
*.fctg-digital-booking-non-production.fcl.cloud
acquiatestau.flitech.net
acquiaprod.flitech.net
corporate.services.fcl.cloud
*.non-prd.home.fcl.cloud
*.prod.websites.fcl.cloud
*.edge.soar.fcl.cloud
5649648836411392-fe3.pantheonsite.io
acquiatest.4dconsulting.com.au
*.prod.websites.fcl.cloud
acquiaprod.flitech.net
acquiatest.flitech.net
corporate.services.fcl.cloud
prd.eca.fcl.cloud
customer-afd.prd.tmoz.fcl.cloud
acquiatestau.flitech.net
payments-wss.stg.eca.fcl.cloud
corporate.services.fcl.cloud
acquiaprod.flitech.net
5649648836411392-fe3.pantheonsite.io
5649648836411392-fe3.pantheonsite.io
corporate.services.fcl.cloud
*.prd.globalscv.fcl.cloud
5649648836411392-fe3.pantheonsite.io
corporate.services.fcl.cloud
5649648836411392-fe3.pantheonsite.io
acquiaprod.flitech.net
stg-consultant-afd.stg.tmoz.fcl.cloud
5649648836411392-fe3.pantheonsite.io
*.prd.home.fcl.cloud
acquiatestau.flitech.net
acquiaprod.flitech.net
acquiadev.flitech.net
5649648836411392-fe3.pantheonsite.io
acquiadev.4dconsulting.com.au
*.prod.acquia.fcl.cloud
*.websitesnext.fcl.cloud
5649648836411392-fe3.pantheonsite.io
5649648836411392-fe3.pantheonsite.io
*.soar-latest.fctg-digital-booking-non-production.fcl.cloud
*.prd.globalscv.fcl.cloud
uk.prod.webflow.websites.fcl.cloud
acquiatest.flitech.net
prd.eca.fcl.cloud
acquiatest.flitech.net
payments-wss.stg.eca.fcl.cloud
5649648836411392-fe3.pantheonsite.io
usca-consultant.stg.eca.fcl.cloud
*.prd.soar.fcl.cloud
*.stg.eca.fcl.cloud
acquiatestau.flitech.net
designsystem.websites.fcl.cloud
acquiatest.flitech.net
*.stg.eca.fcl.cloud
payments-wss.prd.eca.fcl.cloud
corporate.services.fcl.cloud
acquiastage.ao.fclmedia.com
acquiatest.4dconsulting.com.au
5649648836411392-fe3.pantheonsite.io
*.non-prod.soar.fcl.cloud
*.qa.globalscv.fcl.cloud
5649648836411392-fe3.pantheonsite.io
*.stage.websites.fcl.cloud
acquiatest.flitech.net
acquiaprod.flitech.net
*.stg.voltron.fcl.cloud
*.prd.voltron.fcl.cloud
acquiaprod.flitech.net

Certificate

The complete raw certificate details for customer.stg.eca.fcl.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubEfJz1jN/cBvbd82Er8
ogb36lYbZHTULHbAjYNae9/B+hh5LRoRDc/GdXmpvj+VCCP3v8ZZGnmsMMPwqStQ
3tt7In/Whaa6WXlQXaCkg0F1+dM3mvxUOvzkniDwK523vfh6wfTkDHDe3lyVydnR
ImGl7rJPJl8Rm943LHoGONYRQp5BS/0DeCEWgAyVDjN1PQXtYzeBrgWjR2ymNXAl
tgicJdBmeOsmVnPR5XBkzLoOma3/LdjcnZ6og8dZx5T/MD2oAirr1w6CxrkaSoK4
gYGjZpdLRkqGoirhyQ8NxANHqu2u7sPS7JYGFbmjWVCRgu9Z82Tr2H0PE46q7Q+6
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17136267982085272909711142363551300084
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customer.stg.eca.fcl.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23441428380572959857288936307104555359179623944168142521902314715677938438969845154727812848623918088468848395836946500773904118393611049859010566144881021146218905017287872335270530999449360794605872515775856621912750727908847776483244498404086544267066836281375174310258938351870176722662508234588370035615107813258926027790869876695625763399206745658677957437805333447845460432672621576546500844644789402217166214465304853457551724419559056576980536959873826369838170115484170453876731555173491450431670303606913506238092314719941604003922157665349641243193541763541113296205933798889794153166688668064543520307771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c5dafea480a9b3533d5bd0f49d261e20c61780d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (235 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.stg.eca.fcl.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-securepay.travelassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-customer.stg.eca.fcl.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-securepay.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-securepay.cruiseabout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-securepay.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-securepay.flightcentre.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0029d0b9abd793880d7d64deb72976c52fa85df6c9ad916477ca02f844af95fe4bf987b064c367cc067dc4835e1bf9813376018cd1402f95f318ee16cc2fc9fa0113880c3d88292dd2eec2a31d1c2eb7b3436a36fea5ec980977c7fbc1f989540725c4fe457c008e61ebf4d938f3fab1600fd9d58f2cf699113df368afc9776dba64afce8d2c71aaf6c85ba459f92ae4ca22946da4a581a275852cde19adf40dc0a1ca5b26420c3770559f671d4329025a2fd7751f6b4f99afbd5743f7ea031a8fd17835d42e0403cfb50b6f9d984314c22caa84185980bfa615bfbfd3fbc04f2ee095e8bcd82d73b52cbeae7413dd1b533f375921d11a6ce6614b757c2de0c9df