fahotelbooking.airasia.com

- AirAsia Berhad -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 33:13:71:11:4a:45:a8:d9:ff:72:b8:bd was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AirAsia Berhad

Organization: AirAsia Berhad
Organization unit: Innovation, Commercial and Technology
State / Province: Selangor
Locality: Sepang
Country: MY

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 33:13:71:11:4a:45:a8:d9:ff:72:b8:bd
Serial Number (int): 15807239037820359368701556925
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 71:e8:26:dc:12:c8:04:7f:9b:03:7e:54:d5:d5:cc:17:c4:a5:d1:92
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 33:2e:66:17:af:1e:89:b5:19:8a:b8:96:6a:6d:df:eb:44:de:80:09
Fingerprint (sha256): 03:92:95:e4:43:5c:eb:27:5f:c0:65:09:70:0f:cf:fa:8a:e5:39:6e:ef:76:4d:39:ed:12:12:94:6d:0e:0a:63

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2

Check the revocation status for certificate fahotelbooking.airasia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fahotelbooking.airasia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fahotelbooking.airasia.com

Other certificates including the domain name airasia.com

(limited to 100 certificates)
flights-elasticsearch.airasia.com
iss.airasia.com
stgrps.airasia.com
d.d8u.com
redappmiddleware.airasia.com
acefare.airasia.com
hercules.airasia.com
aimsws.airasia.com
firebaseapp.com
auth.facesvbmobilecloud2-stg.airasia.com
neogbs.airasia.com
firebaseapp.com
flights-apm.airasia.com
incapsula.com
firebaseapp.com
booking11.airasia.com
thvpn.airasia.com
pcissl001.insnw.net
firebaseapp.com
t.airasia.com
support.airasia.com
incapsula.com
firebaseapp.com
tag.airasia.com
pcissl001.insnw.net
firebaseapp.com
extranet.airasia.com
feedback.airasia.com
stgevoucher.airasia.com
redbuzzl2.airasia.com
tour.gateway.airasia.com
redapp-service.airasia.com
uatdotrez.airasia.com
firebaseapp.com
firebaseapp.com
k.airasia.com
skyiq-stg.airasia.com
wifi.airasia.com
firebaseapp.com
stgtaxinvoice.airasia.com
firebaseapp.com
stgaimsapingvj22.airasia.com
holidays.apiairasia.com
aacefb.airasia.com
holidays.apiairasia.com
sd.airasia.com
firebaseapp.com
mimir.services.ota.airasia.com
firebaseapp.com
firebaseapp.com
promotion.airasia.com
fahotelbooking.airasia.com
www.twinpeaks.dev
app.airasia.com
www.twinpeaks.dev
storage.services.ota.airasia.com
xtraction.airasia.com
stg-gomchatbotadmin.airasia.com
firebaseapp.com
api.gateway.airasia.com
airasia.com
appdelivery01.airasia.com
wifi.airasia.com
paygate.airasia.com
www.optiontown.com
aimsportal.airasia.com
mimir.search.ota.airasia.com
stgnewmember.airasia.com
firebaseapp.com
mimir.services.ota.airasia.com
museum.airasia.com
stgprebookmeal.airasia.com
hms.airasia.com
firebaseapp.com
firebaseapp.com
app1.ftrans01.com
xpress.airasia.com
throughthelens.airasia.com
bo.facesvbmobilecloud-stg.airasia.com
stg-redwebsocket.airasia.com
api.facesvbmobilecloud.airasia.com
firebaseapp.com
booking2.airasia.com
zodiac.airasia.com
thvpn.airasia.com
redtix.airasia.com
life.airasia.com
firebaseapp.com
life.airasia.com
firebaseapp.com
oms.airasia.com
www.optiontown.com
newsroom.airasia.com
sec-logs.airasia.com
mars.data.airasia.com
d.d8u.com
firebaseapp.com
eps.airasia.com
firebaseapp.com
subscription.airasia.com

Certificate

The complete raw certificate details for fahotelbooking.airasia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmrJUCsm1NWVWtBZpMaS
MP46jjQUhBVtLnX7454YPofJ8XYnuky6Aa1xQyz015sfXqtObGWkbOS2ZqclR8UE
JJY6y1bKDkbm6X3g2G67lMx1oeokfuEr77h3EOu8XROBayiNQoP9FgkSZ+ZWL4+A
Grm4X/p9iKyHooOWy7wehes1ELvHGgFgdmtL9/DwpCp5tcvXP80wCkuaVxrWRwI8
mS7l98kd0UYOxYsY/tri1RWeapt/+IRIrFBXu4Cd058zekam0v7OpEyZRrjATlNh
q6pSPydzTEx/gkK68EESWdvJo8rdVeHGvDTf05c1MekZjwQSKoDZhww2agDXidsq
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15807239037820359368701556925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-15 05:36:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-15 05:36:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selangor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sepang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Innovation, Commercial and Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AirAsia Berhad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fahotelbooking.airasia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21513170170576525029196653506440291140264733033492268042647459009695897342833278422322738424855983260566514222457969207160228817487001597285987837968678139597855540334367770376097322395472518280237742485230638673239488718720872450327591717293405516632291344778981132063097640062634098599415266361005192622796763007721915827979412042338739077382632513447135715839427027414413144858708450678283131765789372968689089745565025907504381608663639784047688351751031798691280851127708746278505405566455031394563266449842134422528002707387032981671388937642370534444868627271964584292440882346736151816838585628255572157213387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fahotelbooking.airasia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71e826dc12c8047f9b037e54d5d5cc17c4a5d192
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166763968d7000004030047304502210089b0a7828c861d7b0349a34594e52f5689e5e6230308a90068688f8ff0394b9b022076f2e735f6f2bf10782f297a80aa964c57dd131581fb924ea953035a6fcc3257007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016676396a4a00000403004630440220650be611ff928175e8ce903bbfc4a143830d6433554dd2540ff6d032973f9e5c02202b950e5cd63989a82913d4504f848972fc4dfc085a44f6693c81a66d24b5d41e0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001667639694900000403004630440220364f9538522e3eeae8aa429c311ec90af5dc0713b1c558a37ec242c1d3f93e6902202ebded733a37ba200d300cf1793acb0017317d0c28b74fc2fb4e5a128a2a717d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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