apiairasia.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ee:cc:71:7b:51:6d:d7:f0:af:06:3f:ed:34:20:89:75:31 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apiairasia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:cc:71:7b:51:6d:d7:f0:af:06:3f:ed:34:20:89:75:31
Serial Number (int): 342595812864337088852278459352003667129649
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:f0:3e:6d:1e:4f:6e:d0:20:7e:ce:36:53:6d:f2:7d:f9:c9:c6:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:95:5e:82:60:1b:6a:01:36:dc:f0:a5:3a:bd:61:3a:5d:3d:0c:d5
Fingerprint (sha256): 04:22:c6:6b:98:b0:20:a2:92:5c:ea:b5:2a:97:f3:d8:37:ad:0c:01:3f:5d:ea:a0:9a:0e:79:96:bb:6f:d3:36

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apiairasia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apiairasia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.apiairasia.com
apiairasia.com

Other certificates including the domain name apiairasia.com

(limited to 100 certificates)
flights-lfc.apiairasia.com
nmqp.apiairasia.com
f2a.apiairasia.com
aliyun.apiairasia.com
nmqp.apiairasia.com
widget.apiairasia.com
data-content.apiairasia.com
f2.apiairasia.com
flights-lfc.apiairasia.com
flights-auth.apiairasia.com
th.ride.apiairasia.com
food-id.apiairasia.com
food-id.apiairasia.com
nmqp.apiairasia.com
shop.apiairasia.com
holidays.apiairasia.com
ava-dashboard.apiairasia.com
holidays.apiairasia.com
ocrsnap.apiairasia.com
hotelsbe-auth.apiairasia.com
apiairasia.com
payment.apiairasia.com
f1.apiairasia.com
flights-auth.apiairasia.com
holidays.apiairasia.com
homepage.apiairasia.com
hms.airasia.com
f1.apiairasia.com
navitaire.apiairasia.com
dshotelranking.apiairasia.com
food-id.apiairasia.com
ava-dashboard.apiairasia.com
k.apiairasia.com
k.apiairasia.com
sch.apiairasia.com
ikhlas.apiairasia.com
my.ride.apiairasia.com
bee.apiairasia.com
theorigin-sch.apiairasia.com
navitaire.apiairasia.com
bee.apiairasia.com
flights-auth.apiairasia.com
holidays.apiairasia.com
f1.apiairasia.com
navitaire.apiairasia.com
payment.apiairasia.com
f2.apiairasia.com
holidays.apiairasia.com
bee.apiairasia.com
my.ride.apiairasia.com
mytest.ride.apiairasia.com
nmqp.apiairasia.com
nmqp.apiairasia.com
food.apiairasia.com
lookup.apiairasia.com
my.ride.apiairasia.com
payment.apiairasia.com
payment.apiairasia.com
hotels.apiairasia.com
ride.apiairasia.com
ikhlas.apiairasia.com
xpress.apiairasia.com
holidays.apiairasia.com
apiairasia.com
flights-auth.apiairasia.com
ppsch.apiairasia.com
theorigin-sch.apiairasia.com
hms.apiairasia.com
p.apiairasia.com
f1.apiairasia.com
xpress.apiairasia.com
f2.apiairasia.com
nmqp.apiairasia.com
holidays.apiairasia.com
flights-auth.apiairasia.com
nmqp.apiairasia.com
sch.apiairasia.com
k.apiairasia.com
payment.apiairasia.com
f1.apiairasia.com
nmqp.apiairasia.com
k.apiairasia.com
payment.apiairasia.com
flights-auth.apiairasia.com
theorigin-sch.apiairasia.com
nmqp.apiairasia.com
f2.apiairasia.com
f.apiairasia.com
k.apiairasia.com
aliyun.apiairasia.com
th.ride.apiairasia.com
dshotelranking.apiairasia.com
holidays.apiairasia.com
ride.apiairasia.com
holidays.apiairasia.com
aliyun.apiairasia.com
navitaire.apiairasia.com
hms.airasia.com
widget.apiairasia.com
hms.airasia.com

Certificate

The complete raw certificate details for apiairasia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5FYz5OQzuD3eswCc5A9
srjes/ul4BxMwC/yGCBufWIdrSdbF7B/MET30zACf6F+pjXKGeI3DB59Xdz3j0Ns
ACPAJ/PHG4WfsqbpUNsp7fOkUtSPkzHhKfYbg30p34fmMS8KaDkicz0e3ibmEe+I
RB7/7s9dEmgMWQ7dBBntWsVbGoMa6fpvP5bbRKztctZ/wsSKuY4UZfhdvGgXZwY1
Sz2X9FaYRwvh9vypPAw6YH4XCb85JAUYvDhsruOu3F27QPF/G26KB2sAmfH2epdg
jHoyxDbeoDWyZFTi93iBFSQCaLiXEiZRfpffZsnQdEj7N9VaaJcDrXOGj5JcGIts
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342595812864337088852278459352003667129649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 17:21:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 17:21:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apiairasia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22163376605311005465296695572133187952076489279230414856250307497988714435812391824616553225068618650536277552408855889031863591637594161710717116123202541390899304776463261080932097661977014987954460579101709142989895501163342624605376276366613953043363432817550412596082602262268838952605246815292649819091872254365799496838570385762144491138506835258060712053446863649067928110741046847840338597632812747534215957023821763637297190309392576383242280793410241115956731043791618317013050647031593463004639811801738079939840903100109059931081306703656760640102930880688507477952022819070730358257101181953155669912723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ef03e6d1e4f6ed0207ece36536df27df9c9c670
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apiairasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiairasia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b8c1eaea80000040300473045022100dd3df648ea828612cb6c40041cdb6799885c118737ce5d97081638ea0028944f0220362988ac3a1bd20402a6829898599bbe3af4c05b92e635b5838910ed1449fe57007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b8c1eaeb70000040300473045022100f0ef92631ee2327219b96a735aca7dd4bbd11cba027b2290ce8adfae73cf6ce802200dfce1043091258142ba92f56e0b0f4dc1ee5aad88eddf50e0c5ef4a3ac62087
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003a6d39c81d8ab7db66d2dcd8b9d726f98a84efad677676c68257eaf71c1a3acc0c13c41da299a5c3b6a423ba04c8c881e6a0e12e83e0755c0f126c2d7772fd6f80b4f841e2f208585e412d4f7c69a1b227ffc04184f3acc963e182f09bff7626cf2571764f42382b817f10c8a32ee88e9c6a514a583b073f466da91c1db762b3edfff6434cd6e3bc42048375b13d8d917a2e31ddd31dbbff02bcac4cb0f4c24cde1680545ec23d4e4f09663d8ed24aa4c1e0bb2eeb2bd1578ba17d2f3cbbe629d8249149363948d6e12ef75a4e308258ca98280d9a1105d5b212263fa10f931c2097c646fc504eb82177bf8518d28b9629229058d9be0d7a829511764e44cbe6