*.fclmedia.com

- Flight Centre Travel Group Limited -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 07:00:1f:bf:69:95:1d:1c:be:2d:9d:43:47:f9:04:d7 was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Flight Centre Travel Group Limited

Organization: Flight Centre Travel Group Limited
Organization unit: IT
State / Province: Queensland
Locality: Brisbane
Country: AU

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:00:1f:bf:69:95:1d:1c:be:2d:9d:43:47:f9:04:d7
Serial Number (int): 9305239890447357993802703553812825303
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): e7:14:01:33:6c:d8:d1:ef:4a:75:19:6b:df:86:dc:2a:d7:b5:58:70
Fingerprint (sha256): 02:80:88:42:69:fa:47:53:2a:a9:0a:ce:dd:8b:41:10:6d:53:7a:97:d2:06:1b:a7:cd:62:72:44:6b:45:6a:dc

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate *.fclmedia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fclmedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fclmedia.com
fclmedia.com

Other certificates including the domain name fclmedia.com

(limited to 100 certificates)
www.fclmedia.com
acquiaprod.flitech.net
admin.4dconsulting.com.au
acquiastage.flightcentre.com.au
*.fclmedia.com
acquiastage.flightcentre.com.au
acquiadev.flitech.net
acquiaprod.flitech.net
acquiatestau.flitech.net
acquiadev.flitech.net
www.studentflights.com.au
acquiadev.flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
acquiastage.flightcentre.com.au
acquiaprod.flitech.net
acquiadev.flitech.net
track.fclmedia.com
acquiaprod.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
*.fclmedia.com
acquiatest.4dconsulting.com.au
acquiaprod.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
www.studentflights.com.au
acquiaprod.flitech.net
acquiatestau.flitech.net
acquiastage.ao.fclmedia.com
acquiaprod.flitech.net
www.studentflights.com.au
acquiadev.flitech.net
track.fclmedia.com
acquiadev.4dconsulting.com.au
acquiatest.flitech.net
*.fclmedia.com
www.studentflights.com.au
acquiatestau.flitech.net
acquiastage.ao.fclmedia.com
acquiatest.4dconsulting.com.au
acquiatest.flitech.net
www.fclmedia.com
www.studentflights.com.au
acquiaprod.flitech.net
www.studentflights.com.au
*.prd.voltron.fcl.cloud
www.studentflights.com.au
acquiaprod.flitech.net
www.flightcentre.com
admin.4dconsulting.com.au
www.studentflights.com.au
www.studentflights.com.au
*.fclmedia.com
*.prd.voltron.fcl.cloud
acquiastagecf.flitech.net
acquiadev.4dconsulting.com.au
acquiadev.flitech.net
acquiadev.flightcentre.com.au
admin.4dconsulting.com.au
*.fclmedia.com
admin.4dconsulting.com.au
acquiatestau.flitech.net
acquiaprod.flitech.net
track.fclmedia.com
acquiastage.flightcentre.com.au
acquiatestau.flitech.net
secure.fclmedia.com
acquiatestau.flitech.net
www.flightcentre.com
www.flightcentre.com
admin.flightcentre.com.au
acquiaprod.flitech.net
acquiadev.flitech.net
acquiadev.flitech.net
www.flightcentre.com
acquiadev.4dconsulting.com.au
acquiastagecf.flitech.net
acquiaprod.flitech.net
acquiadev.flitech.net
acquiaprod.flitech.net
www.studentflights.com.au
secure.fclmedia.com
acquiastagecf.flitech.net
acquiadev.flitech.net
admin.flightcentre.com.au
acquiadev.4dconsulting.com.au
acquiastagecf.flitech.net
*.prd.voltron.fcl.cloud
www.fclmedia.com
*.stg.voltron.fcl.cloud
acquiastage.flightcentre.com.au
www.flightcentre.com
acquiastagecf.flitech.net
acquiatestau.cruiseabout.com.au
acquiatest.flitech.net
acquiadev.flitech.net
acquiastage.flightcentre.com.au
www.studentflights.com.au
acquiatest.flitech.net

Certificate

The complete raw certificate details for *.fclmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmkFaOF2uFZydjxN1Tmn
2KT1noau55VmDSQP6Fh2gcdBnVR9w2f4F7TV5fDsesnFSmqFu6rngQEG16bvFTLf
n/Vz0bIYTrSYkmLyvOggYxL6kEnlWWJVIbvEQvB+DqsgSRlU/8Te4NjcooReo7Jx
oqINYvokiSpNx6AQUCyqTGIIvUUwsc37RO7VGsGOLRHHuKJzQEowB1pYSjfUqlVX
qGm/X4a+HcJJuT0dqOezQ3W4JxFvq0zXFlgcEaM7hj2Jevu+uMBZJLAdM33oEiy7
Ai/GY4bczpBR5lvwg8wOoOotAR6coOvC5zAwOgqsd5JcpqWdKuKy/rUzK0NJp7sI
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9305239890447357993802703553812825303
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Queensland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brisbane'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Flight Centre Travel Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fclmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22522206134111358342199747831527582651334488149541637757327655111129772518027975233042817650329623762764647010473144747003007768087826966314886680651010714717440998321028783793667983663577716212363336290454339907501180416450459645940773104435791763590476302808118578548265468109801109999664552450088923688002879454323054087895540457336145035230049979313885016262680875955640644872116615635147579949433858869619297526950733286957813402362093346905287825386944498884649040142974345165762405788820484666091800357689017181992995970254332141221352687136695335570159612706206061532279882688129472022797466383608590433454263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fclmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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