xtraction.airasia.com

- AirAsia Berhad -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 08:e0:ed:91:8a:f4:2c:11:6d:56:60:ec was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AirAsia Berhad

Organization: AirAsia Berhad
Organization unit: Innovation, Commercial and Technology
State / Province: Selangor
Locality: Sepang
Country: MY

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 08:e0:ed:91:8a:f4:2c:11:6d:56:60:ec
Serial Number (int): 2747801347811444603644961004
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 26:82:e9:8b:ac:df:4a:25:d0:e8:df:6c:35:7a:d3:42:4b:1c:c0:25
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): fc:c2:3d:8d:be:9a:dd:ec:af:9a:12:a2:d2:e5:38:6a:a3:ca:a3:e5
Fingerprint (sha256): 03:b9:f3:e9:9e:7a:fc:37:66:80:60:fe:e6:58:8c:1f:a8:da:c7:5c:d5:34:9a:b1:c7:94:68:1a:93:1a:b6:65

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2

Check the revocation status for certificate xtraction.airasia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xtraction.airasia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xtraction.airasia.com

Other certificates including the domain name airasia.com

(limited to 100 certificates)
flights-elasticsearch.airasia.com
iss.airasia.com
stgrps.airasia.com
d.d8u.com
redappmiddleware.airasia.com
acefare.airasia.com
hercules.airasia.com
aimsws.airasia.com
firebaseapp.com
auth.facesvbmobilecloud2-stg.airasia.com
neogbs.airasia.com
firebaseapp.com
flights-apm.airasia.com
incapsula.com
firebaseapp.com
booking11.airasia.com
thvpn.airasia.com
pcissl001.insnw.net
firebaseapp.com
t.airasia.com
support.airasia.com
incapsula.com
firebaseapp.com
tag.airasia.com
pcissl001.insnw.net
firebaseapp.com
extranet.airasia.com
feedback.airasia.com
stgevoucher.airasia.com
redbuzzl2.airasia.com
tour.gateway.airasia.com
redapp-service.airasia.com
uatdotrez.airasia.com
firebaseapp.com
firebaseapp.com
k.airasia.com
skyiq-stg.airasia.com
wifi.airasia.com
firebaseapp.com
stgtaxinvoice.airasia.com
firebaseapp.com
stgaimsapingvj22.airasia.com
holidays.apiairasia.com
aacefb.airasia.com
holidays.apiairasia.com
sd.airasia.com
firebaseapp.com
mimir.services.ota.airasia.com
firebaseapp.com
firebaseapp.com
promotion.airasia.com
fahotelbooking.airasia.com
www.twinpeaks.dev
app.airasia.com
www.twinpeaks.dev
storage.services.ota.airasia.com
xtraction.airasia.com
stg-gomchatbotadmin.airasia.com
firebaseapp.com
api.gateway.airasia.com
airasia.com
appdelivery01.airasia.com
wifi.airasia.com
paygate.airasia.com
www.optiontown.com
aimsportal.airasia.com
mimir.search.ota.airasia.com
stgnewmember.airasia.com
firebaseapp.com
mimir.services.ota.airasia.com
museum.airasia.com
stgprebookmeal.airasia.com
hms.airasia.com
firebaseapp.com
firebaseapp.com
app1.ftrans01.com
xpress.airasia.com
throughthelens.airasia.com
bo.facesvbmobilecloud-stg.airasia.com
stg-redwebsocket.airasia.com
api.facesvbmobilecloud.airasia.com
firebaseapp.com
booking2.airasia.com
zodiac.airasia.com
thvpn.airasia.com
redtix.airasia.com
life.airasia.com
firebaseapp.com
life.airasia.com
firebaseapp.com
oms.airasia.com
www.optiontown.com
newsroom.airasia.com
sec-logs.airasia.com
mars.data.airasia.com
d.d8u.com
firebaseapp.com
eps.airasia.com
firebaseapp.com
subscription.airasia.com

Certificate

The complete raw certificate details for xtraction.airasia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiJPwL9ffriEm0gXvVFy
ZA9Vk+9y1s/hiJLmUBdSkCkRRDCJsvAWPZOfKrIuwr0mNUCw87SQ7fzcgi/MeBSn
stFf8ynO+XrfQUwMn3Mfva3kZz58a2fYy7W51iahakjryhDCOvps6ryvbmkIPj+Q
KODl6Cgtn02RE1pHMU7DS3xcwh/ML62T51IemYQ6Pr8apJbep0t4CERPUvd6Oy0m
fV6sQtUpnH6B2weTnHr2kZMCCwWUkt2v33x0/nZXd7G5jsS3lIvBUdZyFPwS5iqL
xbKgw3ehO2M+AjSPTwmP60n2hF027+R9VDJrPdSsePlxlLEKUJn0QM/fj1J5fPZx
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2747801347811444603644961004
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-15 06:16:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-15 06:16:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selangor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sepang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Innovation, Commercial and Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AirAsia Berhad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xtraction.airasia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22992291152258287835276842780458828359390241501526644099566365626805480113083810812948449183337388881603713930781144150245381118771928268431657335831331877469487059445155628029981287578182031261029899767207142873357195018601203430120239222687493856498657551675105307047849929568519928722794222474796973830781353858159083793893594719211781657933330190694517127372887885499228949474771654592748123198048483350944042695764653901037318153227989759054020424905422804305634421359992369530186422727703645244953041649987912842701905307369063931208598558824517274890741364368230752212112016535944315002569168020723909090767323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtraction.airasia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2682e98bacdf4a25d0e8df6c357ad3424b1cc025
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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