api-bee.stgairasia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:02:cf:28:b0:6c:d9:38:6b:0c:ec:a8:4e:a0:d7:c7:5a:3f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-bee.stgairasia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:02:cf:28:b0:6c:d9:38:6b:0c:ec:a8:4e:a0:d7:c7:5a:3f
Serial Number (int): 349405069926212640738961877442669731863103
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 86:eb:95:b4:88:1f:44:44:b9:b3:98:88:9b:af:b8:13:77:8d:2f:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:7e:e6:f4:ae:c2:4f:41:24:55:4c:b6:b6:f0:cd:c0:c2:d2:f7:f2
Fingerprint (sha256): 05:52:3e:e6:ab:fd:23:30:e4:14:01:5e:8c:65:ab:49:ab:56:13:bc:56:d4:7d:d1:43:01:4a:41:6e:f2:ae:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api-bee.stgairasia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-bee.stgairasia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-bee.stgairasia.com

Other certificates including the domain name stgairasia.com

(limited to 100 certificates)
headless.stgairasia.com
aahealth.stgairasia.com
galaxysuite.stgairasia.com
www.lucasschneider.com.br
habittrack.app
currencyconversion-api.stgairasia.com
flight.airasia.gateway.stgairasia.com
integrarealtech.com
lemon.stgairasia.com
explore.stgairasia.com
citi-internal-uat.stgairasia.com
dashboard.services.ota.stgairasia.com
doccheckadmin.stgairasia.com
webcontent.stgairasia.com
checkinapp-reg.stgairasia.com
bee-id.stgairasia.com
api-bee.stgairasia.com
payment.staging.cofftea.app
food-id.stgairasia.com
core.services.ota.stgairasia.com
api-bee.stgairasia.com
coupons.stgairasia.com
payment.stgairasia.com
transporter.gateway.stgairasia.com
fresh.stgairasia.com
ikhlas.stg-apiairasia.com
transfer.gateway.stgairasia.com
galaxysuite.stgairasia.com
virtual-card.gateway.stgairasia.com
staging-aa.apps.ota.stgairasia.com
dashboard.flight.ota.stgairasia.com
core.services.ota.stgairasia.com
gifting-dashboard.stgairasia.com
oms-dashboard.stgairasia.com
subscription.stgairasia.com
muramotors.com
payment-api.stgairasia.com
dashboard.flight.ota.stgairasia.com
oms-dashboard.stgairasia.com
doccheckadmin.stgairasia.com
dutytravel.stgairasia.com
discounts.stgairasia.com
holidays.stg-apiairasia.com
citi-uat.stgairasia.com
lemon.stgairasia.com
notification.stgairasia.com
checkinapp.stgairasia.com
stgairasia.com
hms.stgairasia.com
fresh.stgairasia.com
flights.stgairasia.com
currencyconversion-api.stgairasia.com
hotel-book.gateway.stgairasia.com
www.agoact.com
hotel-offer.gateway.stgairasia.com
doccheck.stgairasia.com
ava-dashboard.stgairasia.com
currencyconversion-api.stgairasia.com
core.services.ota.stgairasia.com
kifoo.app
oms.stgairasia.com
subscription.stgairasia.com
gifting.stgairasia.com
lemon.stgairasia.com
holidays.stg-apiairasia.com
currencyconversion-api.stgairasia.com
lemon.stgairasia.com
bee.stgairasia.com
mimir.services.ota.stgairasia.com
bee.stgairasia.com
myshare.social
oms-dashboard.stgairasia.com
hotel-info.gateway.stgairasia.com
xpress.stgairasia.com
citi-internal-uat.stgairasia.com
lemon.stgairasia.com
hotel-book.gateway.stgairasia.com
www.stgairasia.com
webcontent.stgairasia.com
staging-aa.apps.ota.stgairasia.com
seoflights.stgairasia.com
seoflights.stgairasia.com
www.lucasschneider.com.br
sso-kibana.stgairasia.com
currencyconversion-api.stgairasia.com
sadaqah.stgairasia.com
dashboard.services.ota.stgairasia.com
shop.stgairasia.com
seoflights.stgairasia.com
explore.stgairasia.com
food-id.stgairasia.com
snapweb.stgairasia.com
api.gateway.stgairasia.com
travelmall.stgairasia.com
transporter.gateway.stgairasia.com
lemon.stgairasia.com
gifting.stgairasia.com
doccheck.stgairasia.com
discountscms.stgairasia.com
www.stgairasia.com

Certificate

The complete raw certificate details for api-bee.stgairasia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVw7eg5WbJ1tNCzPfC4l
G7VEZqN4/8s7bBl7N47RZAEbuXLwzdwLJW3jjDXWxnV95FbzM3ZJF3146O31fwVy
Oi/ZJ/vtfm6krbcfAPepJRKaGOL2LEcIxXJQLCd/EOpqyyyCjZQPSlm60RMag7sr
jxsoHjjb5h4nWwjSTzV1mUQrco8ByxUCgP29K6nucocVYua2Yp/UUNppeQGtrxN3
q1JCsjdKnBhUoUWG9AP+Yq0hIVsZfjRPz2qc0FyJBOLuyiLDE9fMNn1Z+iZ5FMQn
v/P2t/jMQ9VD40Czfg/Veu3OAyqHxb34AdGPLv5982o5UYdQeoe50uJUwQj8OtdT
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349405069926212640738961877442669731863103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-21 09:55:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-21 09:55:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-bee.stgairasia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24914427535933994170453116459531023929684471286034339880722651305837256276354652159536154887461459485174467486130922795674385055289758913215663755157698022228300101837154595670952730606617170020701719638315535330515324308717286357400024298395893943973711594071002747635266199188423658239369867970702427645926667218258005947912452333833285094881624643691472777803827678911931813929394431821786183049536732997878500022709516596733296564670198736474244552315572325607114657926126310119189922511285681099426345970260680985568026463000553123107385242510602905692601089695484081576081314476593095997911385717681226459337697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86eb95b4881f4444b9b398889bafb813778d2fdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-bee.stgairasia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017e7c471fb4000004030047304502204d710b3b38b8a8228ed6ebff49b0e55695f84f88b33c9836922eb56ea6ce2627022100f9eab18f71f6522ab2f6023106579631bb160f9beaef798c6c66aced8cd387e100770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017e7c471fd20000040300483046022100992676ea9e281cdc3e8137075d0b835bc2ec80086b884a69f4c7fe4902ee4012022100dbe34c256d78110c23f78fa67ff4ab5a1d486cd0d2828a214d2f4ffe984803c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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