*.cebupacificair.com

- Cebu Air, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 26:f3:d2:9e:65:62:12:e8:ec:e3:8c:6f was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cebu Air, Inc.

Organization: Cebu Air, Inc.
State / Province: Metro Manila
Locality: Pasay
Country: PH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:f3:d2:9e:65:62:12:e8:ec:e3:8c:6f
Serial Number (int): 12055193966229856109763726447
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 28:88:bf:2d:bf:cf:73:29:01:a0:0c:9e:7f:b8:88:5f:f0:ac:f8:18
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 45:fa:4f:b6:47:3c:a9:c5:6e:30:29:f2:2e:c8:f6:4c:1d:cf:e4:aa
Fingerprint (sha256): 06:9f:6c:04:06:ca:65:16:6e:e0:e1:dc:e0:c0:1c:27:6d:e0:e4:d1:35:e9:47:1b:28:fc:a8:26:44:7c:7a:19

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2

Check the revocation status for certificate *.cebupacificair.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cebupacificair.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cebupacificair.com
www.cebupacificair.com
cebupacificair.com

Other certificates including the domain name cebupacificair.com

(limited to 100 certificates)
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
book.cebupacificair.com
*.cebupacificair.com
facilities.nchmd.org
cebhelpdeskportal.cebupacificair.com
partners.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
soar.cebupacificair.com
*.cebupacificair.com
tickets.dtradebox.com
itdesk.tropicknitsindia.com
*.cebupacificair.com
ecrew.cebupacificair.com
facilities.nchmd.org
cebupacificair.com
learning.cebupacificair.com
*.cebupacificair.com
tickets.dtradebox.com
*.cebupacificair.com
waytogo.cebupacificair.com
cebupacificair.com
groups.cebupacificair.com
cebupacificair.com
*.cebupacificair.com
*.sap.cebupacificair.com
groups.cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
itdesk.tropicknitsindia.com
*.cebupacificair.com
funtours.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
cebupacificair.com
tickets.dtradebox.com
*.cebupacificair.com
cebupacificair.com
*.cebupacificair.com
connect.cebupacificair.com
www.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
test-groups.cebupacificair.com
*.cebupacificair.com
book.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
cebgoreceipt.cebupacificair.com
checkin.cebupacificair.com
deal-broker.com
book.cebupacificair.com
*.cebupacificair.com
ent-soar-tp.cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
deal-broker.com
cebupacificair.com
baggageservice.cebupacificair.com
helpdesk.elrey.com.co
book.cebupacificair.com
*.cebupacificair.com
5jwebapps.cebupacificair.com
*.cebupacificair.com
www.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
documents.cebupacificair.com
*.cebupacificair.com
cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
itdesk.tropicknitsindia.com
mobile-api.cebupacificair.com
secured.cebupacificair.com
groups.cebupacificair.com
*.sap.cebupacificair.com
test-groups.cebupacificair.com
helpdesk.dalycity.org
*.cebupacificair.com
*.cebupacificair.com
ekp.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
waytogo.cebupacificair.com
cebupacificair.com

Certificate

The complete raw certificate details for *.cebupacificair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppSyslMHn1hA3gXLtKoi
S4URUiHEfwi0RydDXwLRK8sZ/kP/CsFD3Brths+C3UcN8tN7DZS+tYp5guBZJiGH
C/7Nni9KIZKL+f/U9xPplfW+xrtzE0+tCP2hCAKTz0tuGPvXnURIHJCVa9xsZdcM
rTDEgx578b4sncn/6GjZTGCkrgDDmLXj5HSShs7bxliR4rLjFtS5lDN7ZcNjuLNX
FzmRLUicXzAha5lbEEEp5f9GYcU3WnHTmuBouHhsvfuFWJILe5AmpcaRHIlakfc7
eIc8iFY0SEsSs5W7E1bypKh5DDGgvvliR2N+5XrIhsPf0mrkqMUxz9RXRnI4pkhZ
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12055193966229856109763726447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-31 05:42:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 09:16:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Metro Manila'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pasay'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cebu Air, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cebupacificair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21028884357578698029422084016702817320083711920689616592007216395912438195162370140740428796872456647106004524925402128691309715413785721412012983951910745492760746787902328245719255920668619839622764522828030773497287041093142773394899807123525116694528325832315583171980087521530848743732450670709694669259375180343281835116227906277447195619409284348385402974207339649091855890503730656599942417477914116459069841749994219189571637404199718629072459485934291826437695359970975326221707355322522933269485544687089882280196361440907191242463331193920956756690081971563036639971241762507014722013938319926150346332461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cebupacificair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cebupacificair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cebupacificair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2888bf2dbfcf732901a00c9e7fb8885ff0acf818
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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