neogbs.airasia.com

- AirAsia Berhad -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 29:3a:f3:44:2d:b9:2d:e8:d2:fd:c3:a3 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AirAsia Berhad

Organization: AirAsia Berhad
Organization unit: Innovation, Commercial and Technology
State / Province: Selangor
Locality: Sepang
Country: MY

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 29:3a:f3:44:2d:b9:2d:e8:d2:fd:c3:a3
Serial Number (int): 12760151892941445726279156643
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: fa:1d:dc:9a:2b:7a:62:fd:97:a6:5d:0b:79:0e:6c:38:6a:e0:ed:72
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 00:86:00:a7:65:5c:c2:76:51:14:41:3d:99:68:d2:5e:b6:7f:4e:f3
Fingerprint (sha256): 00:a4:4b:c7:9c:67:91:ea:5b:28:06:3e:7b:51:c5:c9:48:5e:d5:b1:6b:4c:a1:37:c3:7b:31:d5:fb:51:e4:99

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2

Check the revocation status for certificate neogbs.airasia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for neogbs.airasia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

neogbs.airasia.com

Other certificates including the domain name airasia.com

(limited to 100 certificates)
flights-elasticsearch.airasia.com
iss.airasia.com
stgrps.airasia.com
d.d8u.com
redappmiddleware.airasia.com
acefare.airasia.com
hercules.airasia.com
aimsws.airasia.com
firebaseapp.com
auth.facesvbmobilecloud2-stg.airasia.com
neogbs.airasia.com
firebaseapp.com
flights-apm.airasia.com
incapsula.com
firebaseapp.com
booking11.airasia.com
thvpn.airasia.com
pcissl001.insnw.net
firebaseapp.com
t.airasia.com
support.airasia.com
incapsula.com
firebaseapp.com
tag.airasia.com
pcissl001.insnw.net
firebaseapp.com
extranet.airasia.com
feedback.airasia.com
stgevoucher.airasia.com
redbuzzl2.airasia.com
tour.gateway.airasia.com
redapp-service.airasia.com
uatdotrez.airasia.com
firebaseapp.com
firebaseapp.com
k.airasia.com
skyiq-stg.airasia.com
wifi.airasia.com
firebaseapp.com
stgtaxinvoice.airasia.com
firebaseapp.com
stgaimsapingvj22.airasia.com
holidays.apiairasia.com
aacefb.airasia.com
holidays.apiairasia.com
sd.airasia.com
firebaseapp.com
mimir.services.ota.airasia.com
firebaseapp.com
firebaseapp.com
promotion.airasia.com
fahotelbooking.airasia.com
www.twinpeaks.dev
app.airasia.com
www.twinpeaks.dev
storage.services.ota.airasia.com
xtraction.airasia.com
stg-gomchatbotadmin.airasia.com
firebaseapp.com
api.gateway.airasia.com
airasia.com
appdelivery01.airasia.com
wifi.airasia.com
paygate.airasia.com
www.optiontown.com
aimsportal.airasia.com
mimir.search.ota.airasia.com
stgnewmember.airasia.com
firebaseapp.com
mimir.services.ota.airasia.com
museum.airasia.com
stgprebookmeal.airasia.com
hms.airasia.com
firebaseapp.com
firebaseapp.com
app1.ftrans01.com
xpress.airasia.com
throughthelens.airasia.com
bo.facesvbmobilecloud-stg.airasia.com
stg-redwebsocket.airasia.com
api.facesvbmobilecloud.airasia.com
firebaseapp.com
booking2.airasia.com
zodiac.airasia.com
thvpn.airasia.com
redtix.airasia.com
life.airasia.com
firebaseapp.com
life.airasia.com
firebaseapp.com
oms.airasia.com
www.optiontown.com
newsroom.airasia.com
sec-logs.airasia.com
mars.data.airasia.com
d.d8u.com
firebaseapp.com
eps.airasia.com
firebaseapp.com
subscription.airasia.com

Certificate

The complete raw certificate details for neogbs.airasia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XC03+7IbzpYCm4EjjJY
P6oFltjkqLz4KB0G0PU+F1vXCzFqCQ49xClaqjD868q/AEj3eqmP6XQLL8U5Zqom
02DtmiICjEygcHKh0D6KQob178c3aq4Aq60uCJhXjyE9e9aDCUBO6SbffqryCN5Z
NxwOs1H/n3ubT8pvEOb43J0YIXEVr35AxVB1KlzJem5CDWnq0lRRD4NIBWBYSRzG
axAy7CIu8n2GWEEAWPzNMm96etBsbp4mPuXqIwWDZuxQ3KM+7LNQazvDTuiaaW08
1CoinnXVIqp/iyVuKSve7acbG65MMFLaXqtOTZAArlF/rsl1i00B23uw1vBB3sfA
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12760151892941445726279156643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 04:11:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-20 04:11:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selangor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sepang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Innovation, Commercial and Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AirAsia Berhad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'neogbs.airasia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26439383405146140508615799906592532164714811821407461788392155054392178968980382181247551693270573274738901273709419605896558641967743101852928589154252534816204406456800277858799471972406243393283975892518745798630490114608347538364722625367602045931661543565561517489343335888501211857045445377781448994259419662830100330980735576333070460573372323777276828781220081268074615462034314260286374439140889703594063539538641234688593975651369507312842041406220007729053183573445369395542436428260550047495347397071768572371666843745991901299521994795868985157958213518791303416295672000941998993659514636509980725330153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neogbs.airasia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa1ddc9a2b7a62fd97a65d0b790e6c386ae0ed72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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