paygate.airasia.com

- AirAsia Berhad -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:a6:e4:8b:43:9f:1b:cf:e1:16:f9:b8:a9:c3:68:0b:f3 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AirAsia Berhad

Organization: AirAsia Berhad
Organization unit: Innovation, Commercial and Technology
State / Province: Selangor
Locality: Sepang
Country: MY

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:a6:e4:8b:43:9f:1b:cf:e1:16:f9:b8:a9:c3:68:0b:f3
Serial Number (int): 1492360017463911667797777648449802048375795
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: d0:63:8e:00:05:3b:1b:fd:1f:f7:8b:f1:dc:2c:c0:a9:65:89:ee:4a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 27:60:38:78:b1:22:36:c2:b8:23:3f:8f:65:64:f8:aa:4d:78:2a:c2
Fingerprint (sha256): 04:7d:d3:50:41:f2:f2:1f:6b:d0:7f:0d:21:70:d2:c8:ae:38:b8:7d:ba:bf:55:87:69:ea:01:44:43:1e:b0:d4

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate paygate.airasia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paygate.airasia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paygate.airasia.com

Other certificates including the domain name airasia.com

(limited to 100 certificates)
flights-elasticsearch.airasia.com
iss.airasia.com
stgrps.airasia.com
d.d8u.com
redappmiddleware.airasia.com
acefare.airasia.com
hercules.airasia.com
aimsws.airasia.com
firebaseapp.com
auth.facesvbmobilecloud2-stg.airasia.com
neogbs.airasia.com
firebaseapp.com
flights-apm.airasia.com
incapsula.com
firebaseapp.com
booking11.airasia.com
thvpn.airasia.com
pcissl001.insnw.net
firebaseapp.com
t.airasia.com
support.airasia.com
incapsula.com
firebaseapp.com
tag.airasia.com
pcissl001.insnw.net
firebaseapp.com
extranet.airasia.com
feedback.airasia.com
stgevoucher.airasia.com
redbuzzl2.airasia.com
tour.gateway.airasia.com
redapp-service.airasia.com
uatdotrez.airasia.com
firebaseapp.com
firebaseapp.com
k.airasia.com
skyiq-stg.airasia.com
wifi.airasia.com
firebaseapp.com
stgtaxinvoice.airasia.com
firebaseapp.com
stgaimsapingvj22.airasia.com
holidays.apiairasia.com
aacefb.airasia.com
holidays.apiairasia.com
sd.airasia.com
firebaseapp.com
mimir.services.ota.airasia.com
firebaseapp.com
firebaseapp.com
promotion.airasia.com
fahotelbooking.airasia.com
www.twinpeaks.dev
app.airasia.com
www.twinpeaks.dev
storage.services.ota.airasia.com
xtraction.airasia.com
stg-gomchatbotadmin.airasia.com
firebaseapp.com
api.gateway.airasia.com
airasia.com
appdelivery01.airasia.com
wifi.airasia.com
paygate.airasia.com
www.optiontown.com
aimsportal.airasia.com
mimir.search.ota.airasia.com
stgnewmember.airasia.com
firebaseapp.com
mimir.services.ota.airasia.com
museum.airasia.com
stgprebookmeal.airasia.com
hms.airasia.com
firebaseapp.com
firebaseapp.com
app1.ftrans01.com
xpress.airasia.com
throughthelens.airasia.com
bo.facesvbmobilecloud-stg.airasia.com
stg-redwebsocket.airasia.com
api.facesvbmobilecloud.airasia.com
firebaseapp.com
booking2.airasia.com
zodiac.airasia.com
thvpn.airasia.com
redtix.airasia.com
life.airasia.com
firebaseapp.com
life.airasia.com
firebaseapp.com
oms.airasia.com
www.optiontown.com
newsroom.airasia.com
sec-logs.airasia.com
mars.data.airasia.com
d.d8u.com
firebaseapp.com
eps.airasia.com
firebaseapp.com
subscription.airasia.com

Certificate

The complete raw certificate details for paygate.airasia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQFyWBysfPLCQRRUVhYc
Me2YtWCHSMBg9qqQAtognnzmA7EcwHp1j1n3hxId3d/M/dsRtfdgavypHQwpJ74I
/Q9QYNotZ39S9v4HvuDYsaNGVbCjltgR/4YoA6NADc4eqasKJUfkUYBScuU8cnOs
UumKl1mIknUDcl9Ci4ncmY5hqU7dU39g2vWpA6JX//VSTP74HesTsc42HROIHjSM
3RHPVVn2tt61RdxxvDzOWhKveIUvgxtv7AMZordTUzglVyYFPP6slxMkYA5hIST8
xMknU3YoHIC2jtrFUSCk2p5IehVe5kagBtbknHwFfPEH72R1WNuUuLynsoqZo64H
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492360017463911667797777648449802048375795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-07 03:16:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 03:16:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selangor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sepang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Innovation, Commercial and Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AirAsia Berhad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paygate.airasia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25879565891187883408425329684050440909132588533233976685995677843355185008110791623468880062963389950856695599335889321220498802220103300402453977182340149301316186543881314352091145141780775902654255211545326063057764032164072280043299316488480701229246848198876635175508111149167919126398154092032134273827666986374041766336073002824556784023635279881257970521630556726214673618411385958475174514089395759138116260049629603768714901138362334015633762596427066111021176792942465417147876823054368699452959008511729866435535737910659297254998218296431260235791498352615288612549261731841887202291037590336877888407347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paygate.airasia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0638e00053b1bfd1ff78bf1dc2cc0a96589ee4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b42801956b97bedd48dcc5c2896bb1384ae118468aeaa41866b96b2a336b6f47b48a95755ef730e1e3b78020fe93f497eec6f383b5921b97086ffde8036b5fd4d1b22a93457533787bea3a9533859093cbe7d229582f3f318b87f9ea0a42fe3babe3f2adbfbea4ef0e5199a7f5ab095e2eaadc569aac6f2b907fd236243dddeeb508dd058947778cfce509a1ba8d2cc72255bdd741c89a85f662f427b8e8a56e2fc6315ed484dd34e077e89c6f80ccd008b4f2803a4a3527a4283cc8a94e2610ea1462541f2e7c5873819ddfa7cb7aeeb4773c8cf02075ced049586b1122d7f137c9194f53af29d2a3a4f3c4393bd182a7f265cee9bc6db631d427ef384b58ae